4th November 2024 – (Hong Kong) A data breach has been confirmed at two prominent hearing and speech centres in Hong Kong, impacting approximately 150,000 individuals, including around 148,000 patients. The incident involves Widex Hearing Specialists Yaumatei and Starry Hearing & Speech Centre, with the Office of the Privacy Commissioner for Personal Data (PCPD) stating it received notification of the breach on 30th July.
According to a statement from Widex Hong Kong, the computer systems of both centres were targeted by ransomware in July, resulting in unauthorised access to personal data. The compromised information includes patients’ names, dates of birth, addresses, contact details, and medical records, as well as sensitive information regarding current and former employees, such as names, salary details, and bank account numbers. The investigation is ongoing, with further assessments being made to identify the full extent of the affected personal data.
In response to the breach, the centres implemented immediate measures to contain the situation and secure their systems. They have also reported the incident to the PCPD. The organisation has emphasised its commitment to safeguarding patient privacy and data security, urging patients to remain vigilant regarding online and telephone communications and transactions. They have recommended changing passwords and enabling multi-factor authentication to enhance security.