Skip to content

Media Responses

Response to Media Enquiry or Report

Date: ​26 July 2024

Response to media enquiry on the Data Breach Incident of Oxfam Hong Kong

Thank you for your enquiry. Our response to your enquiry is as follows:

Enquiry:
“We would like to make an enquiry regarding the cyberattack incident reported by Oxfam Hong Kong.
  1. Did the Office of the Privacy Commissioner for Personal Data receive a report from Oxfam Hong Kong regarding the cyberattack incident discovered on July 10? If yes, when did the office receive the report?
  2. Did the office offer any instructions or guidance to Oxfam Hong Kong on how to step up their measures in preventing leakage of personal info in the cyberattack?”
Answers (Questions 1-2):
  • The Office of the Privacy Commissioner for Personal Data (PCPD) received a data breach notification from the relevant organisation regarding the incident on 13 July. Although many details of the data breach are yet to be ascertained by the organisation, the PCPD has advised the organisation to notify the affected data subjects as soon as possible. The PCPD has commenced a compliance check into the incident in accordance with established procedures.