Hong Kong watchdog investigates airline and retailer data leaks

The Office of the Privacy Commissioner for Personal Data (Hong Kong) said it has received multiple notifications of data breaches affecting Hong Kong Airlines, Cathay Pacific, Malaysia Airlines, and electronics retailers Yoho Hong Kong and Broadway. As at 30 October, the authority had logged 51 complaints and 48 enquiries related to these incidents, with reported financial losses ranging from about HK$10,000 to more than HK$1.5 million, and formal investigations are under way.

The commissioner warned that fraudsters may exploit leaked personal information to craft convincing phishing messages or to pose as staff or customer-service agents from the affected organisations in order to conduct “precision scams”. Using leaked shopping or flight-booking details, scammers may falsely claim they can arrange returns or refunds and then induce victims to divulge bank account numbers, credit card numbers and passwords, or to make transfers.

The reported incidents underscore targeted social-engineering risk tied to personal travel and retail data, and the authority is pursuing formal investigations into the leaks.