Hong Kong Watchdog Investigates Shun Hing Group Cyberattack Affecting Customer Data
Summary
Hong Kong’s privacy watchdog opened an investigation after Shun Hing Group reported a breach. The company said data belonging to as many as 1.05 million people, mostly customers, had been maliciously encrypted.
Key points
- The Office of the Privacy Commissioner for Personal Data launched an investigation after receiving Shun Hing Group’s breach report on March 23.
- The company’s latest information indicated that personal data belonging to as many as 1.05 million people, mostly customers, had been maliciously encrypted.
- The article says information involving more than 920,000 customers—including names, addresses and email addresses—was affected.
Article Details
- Victim Organization
- Shun Hing Group
- Incident Type
- Cyberattack involving malicious encryption of personal data
- Disclosure Date
- 2026-07-03
- Data Types Exposed
- Names
- Addresses
- Email addresses
- Affected Records
- More than 1 million people were affected. The watchdog cited company information indicating that as many as 1.05 million people, mostly customers, had personal data maliciously encrypted; a separate report stated that more than 920,000 customers' information was involved.
- Operational Impact
- Personal data was compromised and maliciously encrypted. No other operational impact was reported.
- Ransom Or Extortion
- Unknown
- Claim Status
- confirmed