Privacy watchdog investigates data breach at Kowloon Shangri-La after nearly 2000 employees info exposed

The privacy watchdog is investigating after sensitive data about part-time workers was accidentally sent to employees at Kowloon Shangri-La, raising concerns about personal information leakage.

The Office of the Privacy Commissioner for Personal Data (PCPD) said Tuesday that it has received two complaints regarding the incident so far.

A former Kowloon Shangri-La employee said he has received an email with no subject from the hotel group that contained the personal information of 1,941 part-timers, including their names, ID numbers, addresses, salaries, etc.

He added that one of his friends, who works at the hotel, also received the same email on the same day.

The former employee said he and his friend have contacted the hotel about the incident. However, they have yet to receive a response from the hotel group.

It was not the first time the Shangri-La Hotels and Resorts was involved in a data breaching incident. The group faced a cyber-attack in 2022 along with other hotels, with PCPD saying that a total of 290,000 customers were affected.

Read more: Over 290,000 Hongkongers affected by cyberattack targeting eight Shangri-la hotels