Hospital Authority confirms data leak affecting 56,000 patients

Leaked data includes names, gender, and Hong Kong ID numbers.

The Hospital Authority has reported a suspected data breach after patient information was found on a third-party platform.

The breach was detected at around 2 a.m. on 3 April through routine monitoring. Authorities were notified the next morning, and an investigation is underway.

More than 56,000 patients from the Kowloon East Cluster are affected. Leaked data includes names, gender, Hong Kong ID numbers, hospital file numbers, and surgical records.

The authority apologised and said it will notify affected patients via the “HA Go” app, mail, and phone calls.

A hotline (5215 7326) has been set up, operating daily from 9 a.m. to 6 p.m.

Initial checks found no signs of a cyberattack, and systems remain secure. The contractor involved has been suspended.