InvestHK computer hit by ransomware, probe launches for possible personal info leak

InvestHK is investigating whether any personal information was leaked after part of its computer systems came under malicious ransomware attack on Saturday, the government’s investment promotion agency said.

Preliminary findings indicated that the affected areas included an internal customer relationship management system, the agency’s intranet and part of InvestHK's website operations, according to a statement released late last night.

The agency’s public services remained normal as citizens can continue contacting its staff through telephone, email or face-to-face meetings, the statement added.

While it is still determining whether any personal data leakage was involved, risk assessments showed basic information on InvestHK's clients, such as the companies' contact information, and records of InvestHK staff could be affected.

“InvestHK will inform relevant parties if and when further updates are available,” it added.

The agency has also filed a report to the police, the Digital Policy Office, the Office of the Privacy Commissioner for Personal Data, and the Security Bureau in accordance with the established mechanism.

An InvestHK spokesman said it is also seeking advice from the Digital Policy Office and appointed experts to assist with the investigation and recovery.

“We hope the culprits can be brought to justice as soon as possible so as to safeguard information and cybersecurity,” he added.

He also said InvestHK would not send embedded hyperlinks via emails, SMS messages or social media pages for collecting personal information or requesting for payment, therefore calling on citizens to stay alert of suspicious SMS messages or emails.

(Jamie Liu)