HKSTP Drug Safety Testing Center hit by ransomware attack

Hong Kong Science and Technology Parks Corporation (HKSTP) has reported a cybersecurity breach at its Drug Safety Testing Center (DSC), where malicious ransomware infiltrated part of the facility’s computer systems. 

The center immediately isolated and disconnected the affected servers to prevent further spread, activated an incident response team, and reported the case to police for investigation.  

The breach compromised data belonging to more than 30 staff members and over 20 clients.  

A spokesperson said the incident occurred yesterday (May 12), noting that the testing center’s computer systems operate independently from HKSTP’s main network, with cybersecurity managed by an external contractor. 

Following protocol, the breach was reported to the Innovation, Technology and Industry Bureau; Innovation and Technology Commission; Digital Policy Office; and the Office of the Privacy Commissioner for Personal Data.

The center is working closely with its contractor and cybersecurity experts to assess the damage and has notified affected individuals and organizations.  

HKSTP emphasized its commitment to government-mandated cybersecurity protocols and has engaged an independent third-party expert to conduct a full system review, implement fixes, and produce an investigative report.  

Opened in 2022, the Drug Safety Testing Center provides Good Laboratory Practice (GLP)-compliant preclinical services to assess the safety of potential treatments and medical devices. 

The public is urged to report any suspicious emails or messages allegedly from the center to police or HKSTP directly.