Hospital Authority (Hong Kong) security incident history
Hacking, data breaches and other security incidents involving Hospital Authority (Hong Kong), with related coverage.
Hong Kong Hospital Authority breach exposes data of 56,243 patients and staff
56.2KImpact: Personal information of 56,243 patients and hospital staff
Patient information was stolen from the Hong Kong Hospital Authority’s Kowloon East Cluster in April 2026 and illegally uploaded to an external platform. An employee of a contractor leaked personal information belonging to 56,243 patients and hospital staff on the dark web, and the regulator found inadequate monitoring of contractor access, access controls, and security audits for United Christian Hospital’s surgical patient records system. The Hospital Authority accepted the investigation findings, while police arrested the employee and continued their investigation.
Related reports: 4 · last report →Hong Kong Hospital Authority patient data leak sparks reporting controversy
Impact: Patient information
Patient information was leaked at Hong Kong's Hospital Authority. A patient advocate pointed to the Hospital Authority's passive approach to reporting as the cause of the leak, and the specific circumstances of the breach and its scale have not been confirmed.
Read on Hong Kong Free Press HKFP ↗