[BreachExchange] Hong Kong - High-tech cyber attack exposes data of 380, 000

[Audrey McNeil]

http://www.thestandard.com.hk/section-news.php?id=194878

An inactive Hong Kong Broadband Network database containing the personal
details of some 380,000 customers and information on 43,000 credit cards
was hacked by an unknown party using "advanced technology."

The database contains service applicant records of HKBN's fixed and IDD
services as of 2012, representing 11 percent of its total 3.6 million
customer records.

Such information includes names, e-mail addresses, correspondence
addresses, telephone numbers, identity card numbers and information on
43,000 credit cards as of 2012, the company said in a stock exchange filing.

HKBN has reported the incident to police yesterday and will inform the
affected customers as well as notify the Office of the Privacy Commissioner
for Personal Data.

The firm conducted a thorough internal investigation after it discovered
the database had been hacked on Monday, and engaged an external network
security consultant to conduct a comprehensive check of all systems and
services.

A spokesperson for HKBN said the hacker used advanced technology and it is
unknown when and why the database was hacked.

The company is appealing to residents to pay close attention to their
credit card bills and call 3616 9111 or send an e-mail to
inquiry-36169111 at hkbn.net for information.

The spokesman said this had never happened before in HKBN's history, adding
it is extremely sorry about the incident.

Chief executive William Yeung Chu-kwong and chief operating officer Lai Ni
Quiaque apologized to customers who are affected, and said HKBN will
definitely find out the reason behind the hacking.

HKBN has implemented immediate measures to prevent any further attacks, and
is not aware that any of its other customer databases are affected.

The company said it believes the incident is an isolated one and will not
have any material impact on its business and operations.

Shares of HKBN closed 1.92 percent lower to HK$9.73 yesterday.

Several other companies have been hacked in recent years.

Last year, a top travel agency, WWPKG, had its database hacked. The data of
about 200,000 customers was locked and the company was asked to pay a
seven-figure ransom in bitcoin. Luckily, police decrypted the database.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.riskbasedsecurity.com/pipermail/breachexchange/attachments/20180418/25fd3aa4/attachment.html>