Ngong Ping 360 Reports Data Theft and Extortion Affecting Employees, Customers and Tenants
Summary
Ngong Ping 360 says an internal network disruption led to data theft and extortion. Affected information includes names and contact details of employees, customers, suppliers and market tenants; the company says cable car operations are unaffected.
Key points
- Ngong Ping 360 says it discovered that its internal network was not operating normally on February 26 and later confirmed data had been stolen and used for extortion.
- The potentially affected groups include employees, annual pass customers, people on promotional lists, suppliers and Ngong Ping Village tenants.
- Customer information involved names and contact details, such as phone numbers or email addresses.
- The company is assessing the stolen data, monitoring the situation, contacting affected people and coordinating with authorities and Hong Kong’s privacy regulator.
- Ngong Ping 360 says the affected internal network is separate from the cable car operating system, and the incident does not affect cable car service or safety.
Article Details
- Victim Organization
- Ngong Ping 360
- Incident Type
- Software attack involving internal network disruption, data theft, and extortion
- Incident Date
- 2026-02-26
- Disclosure Date
- 2026-02-27
- Data Types Exposed
- Personal information, including names and contact details such as phone numbers or email addresses
- Affected Records
- Not disclosed
- Affected Data Size
- Not disclosed
- Operational Impact
- The internal network system could not operate normally. The company said the cable car operating system was separate and that cable car services and safety were unaffected.
- Ransom Or Extortion
- The company said some data had been stolen and that it was subjected to extortion; no ransom amount or payment status was disclosed.
- Claim Status
- confirmed