Invest Hong Kong promotion agency reports ransomware attack
Learn More
Invest Hong Kong (InvestHK), the government's investment promotion agency, is reporting a ransomware attack affecting parts of their computer systems. InvestHK isolated the affected systems and activated continuity procedures.
The incident was officially reported on February 23, 2025. The preliminary investigation revealed that the attack impacted several critical systems, including
- internal Customer Relationship Management (CRM) system,
- InvestHK's intranet,
- partial website operations - contact form functionality and events updates.
Potentially affected data includes:
- basic client information,
- company contact information,
- InvestHK staff records.
Public services remain operational, with staff accessible through telephone, email, or face-to-face meetings. The exact number of affected individuals have not been disclosed.
Update - as of 3rd of March 2025, InvestHK claims that no personal data was compromised during the ransomware attack.
The agency promptly reported the incident to the authorities, including the Hong Kong Police, Digital Policy Office (DPO), and Office of the Privacy Commissioner for Personal Data.
As a precautionary measure, InvestHK has issued a public advisory stating that they do not send embedded hyperlinks via emails, SMS messages, or social media links collecting personal information, nor do they request payments through these channels.
