Hospital Authority worker arrested for leaking 56k patient data

Police said they have arrested a man working for a contractor commissioned by the Hospital Authority for allegedly stealing the personal data of tens of thousands of patients. The data breach resulted in details of more than 56,000 patients from the Kowloon East cluster being taken without authorisation and leaked on a third-party platform.

The 30-year-old suspect, who worked as a system developer for the contractor, was arrested on suspicion of access to computer with dishonest intent after analysing the system’s logs, according to RTHK. The report notes the information was leaked on a third-party platform. This incident was reported on 8 April 2026.