Invest Hong Kong (InvestHK) announced last night (Feb. 23) a cybersecurity incident involving a malicious ransomware attack that breached part of its computer systems. Upon discovering the issue two days ago, the agency took immediate action to enhance security measures and prevent further ransomware intrusions. They reported the incident to the police, notified the Digital Policy Office, and informed the Office of Privacy Commissioner for Personal Data and the Security Bureau.
The agency condemned these malicious attacks, changed relevant passwords, secured the affected systems, and activated backup protocols.
Initially, the affected areas include internal customer management systems, the intranet, and the operations of some InvestHK websites, such as those for contacting the agency and event information.
Public services remain normal, and individuals can continue to reach out to the agency via phone, email, or in-person meetings. The investigation into whether personal data has been compromised is ongoing.
While the full extent of the impact has not yet been confirmed, preliminary risk assessments suggest that affected records may include basic customer information, such as company contact details, and some internal employee records. The agency will notify relevant organizations and individuals as more information becomes available.
A spokesperson emphasized that InvestHK has consistently executed information and network security according to government procedures. To further strengthen system security, the agency is actively seeking advice from the Digital Policy Office and has engaged experts to assist in the investigation and recovery efforts. They hope to see those responsible brought to justice to ensure information and network security.
The spokesperson reiterated that the agency does not collect personal data or request payments via email, text messages, or social media links. Citizens and relevant parties should remain vigilant and avoid clicking on suspicious links or providing any personal or financial information if they receive questionable emails or texts purportedly from the agency. For inquiries, please contact the Investment Promotion Agency at hotline 3107 1000 or email enq@investhk.gov.hk.
Related News:
InvestHK and HKCEA collaborates spring reception for Mainland enterprises in HK
Paul Lam to visit Malaysia, aiming to foster ties through legal services
Comment