Nearly 17,000 students hit by data leak at Hong Kong exams authority

Nearly 17,000 students from mainland China who applied to take international exams through the Hong Kong Examinations and Assessment Authority (HKEAA) had their personal data compromised, according to the authority. The leaked information included the names, dates of birth and email addresses of approximately 16,900 students. However, the HKEAA confirmed that the Hong Kong Diploma of Secondary Education Examination (HKDSE) and other examinations remained unaffected.

The cybersecurity incident was identified on Thursday and involved an information system used for a limited number of international examinations. The HKEAA promptly reported the incident to the police and notified the Office of the Privacy Commissioner for Personal Data. The authority emphasized that the registration systems for HKDSE and most international examinations were separate and independent of the compromised system.

Following the breach, the HKEAA took immediate protective measures and initiated a thorough investigation to determine the cause and extent of the incident. They also notified the relevant examination organization and are in the process of notifying those affected. The privacy commissioner has launched its own investigation into the matter.

The HKEAA committed to reviewing its security measures, enhancing system protection and monitoring, and implementing appropriate follow-up actions based on the investigation's findings.