Personal information of 297 Bank of China customers at risk due to suspected data breach

685

9th June 2024 – (Hong Kong) Personal data of several Bank of China customers is believed to have been leaked. A Telegram group allegedly operated by hackers uploaded a file named “Bank of China Wealth Management,” containing the names, identification card numbers, and phone numbers of 297 individuals. Some affected customers have confirmed their association with Bank of China Hong Kong, expressing worries about potential illegal exploitation of their personal information. In response to media inquiries, the Office of the Privacy Commissioner for Personal Data stated that they had not received any reports of data leakage incidents but would proactively contact relevant organizations to investigate the matter.

The implicated group is reportedly operational since the beginning of the month, enticing buyers to purchase additional data by publicly sharing samples of personal information. There is a possibility that the leaked data includes credit card details or bank account information. A local expert speculates that the data may have been leaked during its processing by outsourced contractors, suggesting the need for a thorough investigation by the bank to determine if their computer systems were compromised or if there was negligence on the part of the contractors.