Oxfam Hong Kong reports data breach impacting over 470k people
Learn More
Oxfam Hong Kong is reporting a data breach that may have compromised the personal information of over 470,000 individuals.
Oxfam Hong Kong is a branch of the international confederation Oxfam, dedicated to alleviating poverty and advocating for social justice globally. Established in 1976, it operates both locally and internationally, focusing on humanitarian aid, development projects, and public education in Hong Kong and various regions worldwide.
The breach, discovered on July 10, 2024, impacted several of the charity's systems, including the Oxfam Trailwalker system, a platform associated with the annual fundraising trail race. The personal data potentially exposed in this incident includes:
- Names
- Addresses
- Email addresses
- Mobile phone numbers
- Hong Kong identity card numbers
- Payment information
No details are disclosed about the nature of the attack.
Oxfam Hong Kong notified the Office of the Privacy Commissioner for Personal Data (PCPD) on July 13, 2024, and began an investigation in collaboration with independent cybersecurity experts to assess the full extent of the breach and implement remedial measures. The breach has also been reported to the Hong Kong Police and the Hong Kong Computer Emergency Response Coordination Centre.
The privacy watchdog has initiated a formal investigation into the incident to determine the full scope of the breach and ensure compliance with data protection regulations. Oxfam Hong Kong has notified the potentially affected individuals, though the exact number of those impacted is still being determined.
