
4th April 2026 – (Hong Kong) The Hospital Authority has confirmed that patient records were exposed online after its monitoring system detected suspected unauthorised access and disclosure to a third‑party platform, reportedly linked to dark web forums. Speculation had circulated that as many as 270,000 medical records were involved.
The Privacy Commissioner’s Office confirmed it had received formal notification from the Hospital Authority and indicated that more than 56,000 individuals were affected. The compromised data is understood to include patients’ names, Hong Kong identity card numbers, gender, dates of birth, hospital reference numbers, appointment details and certain health information.
Chinese version: https://news.rthk.hk/rthk/ch/component/k2/1849931-20260404.htm - 醫管局有病人資料外洩已報警 私隱專員公署:逾5萬6千人受影響