The Hong Kong Institute of Contemporary Culture Lee Shau Kee School of Creativity (HKICC) has fallen victim to a significant ransomware attack, resulting in the compromise of personal data for over 600 individuals. The breach, which was discovered last Monday, involved the encryption and theft of eight terabytes of data. This data includes personal information of current students and their families, graduates since 2021, teaching staff, and school tenants, along with various internal documents.
In response to the attack, the school has notified the Education Bureau, the police, the Office of the Privacy Commissioner for Personal Data (PCPD), and the Hong Kong Computer Emergency Response Team Coordination Centre. Vice Principal Ger Choi indicated that the school received a ransom note, but further action is required to access its details. The extent of data sharing online by the hackers remains unclear as investigations continue.
This incident is part of a larger wave of cyberattacks targeting Hong Kong entities in recent months. Since last August, at least four other groups, including Cyberport, Union Hospital, the Consumer Council, and the Hong Kong College of Technology, have been similarly targeted. These attacks have led to significant data breaches and operational disruptions, highlighting the urgent need for enhanced cybersecurity measures across all sectors.
In light of the breach, the HKICC has apologized to the affected individuals and advised them to be vigilant against potential scams and unsolicited messages. The school continues to work closely with authorities to resolve the issue and strengthen its cybersecurity defenses to prevent future incidents.
