No Member Data Leaked in Kwai Tsing Health Centre Cyber Incident, Investigation Confirms

Investigation results of suspected intrusion into outsourced network system of operator of Kwai Tsing District Health Centre announced

The Primary Healthcare Commission (PHC Commission) under the Health Bureau announced today (May 12) that, upon the investigation conducted by an independent cybersecurity expert commissioned by the Kwai Tsing Safe Community and Healthy City Association (KTSCHCA), the operator of the Kwai Tsing District Health Centre (Kwai Tsing DHC), it has been confirmed that there was no leakage of members' data in thesuspected intrusion incident involving the outsourced network system of the KTSCHCA on April 27.

The outsourced network system concerned, independently managed by the outsourced service provider contracted by the KTSCHCA, is mainly used to assist with administrative work such as service booking or members sign-in at the Kwai Tsing DHC. All members' data in the system are encrypted. The investigation conducted by the independent cybersecurity expert has confirmed that while the firewall of the concerned network system had been hacked, the core business server system remained unaffected, and no members' data was leaked in the incident.

To enhance cybersecurity, the KTSCHCA has implemented a series of strengthening measures, including enhancing firewall protections, as well as installation of a proactive monitoring system and additional detection tools for more robust surveillance of network connections and detection of unauthorised access attempts. The Kwai Tsing DHC has also reported the investigation results to the Police and the Office of the Privacy Commissioner for Personal Data while the PHC Commission has also informed the Digital Policy Office.

Furthermore, after reviewing the investigation report submitted by the Kwai Tsing DHC and conducting a detailed assessment, the Commissioner for the Electronic Health Record ascertained that the security risks of the relevant system have been eliminated, and therefore, has resumed the connection of the Kwai Tsing DHC with eHealth through the clinical management system specified by the PHC Commission.

All services at the Kwai Tsing DHC have resumed as normal since last Saturday (May 10), and the Kwai Tsing DHC will notify its members via telephone calls and text messages. Members of the public may contact the DHC at 1878 222 during office hours for enquiries.

The Government reiterates its strong commitment to cybersecurity. The PHC Commission will urge the operators of the remaining 17 DHCs/DHC Expresses to make reference to the enhanced measures adopted by the KTSCHCA and continue to review their network systems, including the security risks in the network systems of their outsourced service providers and the related computers, as well as any occurrence of suspicious activities. The PHC Commission will also continue to monitor the operations of the DHCs/DHC Expresses of all 18 districts in Hong Kong to ensure the continuous provision of safe and reliable services.

Notice on appointments to advisory and statutory bodies

A Government spokesman said today (January 12) that Mr Chan Kin-por recently sought approval from the Chief Executive to suspend his three public positions as appointed by the Chief Executive, until the completion of the work of the Independent Committee in relation to the fire at Wang Fuk Court in Tai Po (Independent Committee). Mr Chan made this request to allow himself more time to dedicate to the work of the Independent Committee. After due consideration, the Chief Executive has agreed to and approved this request. The three public positions are: (1) Chairman of Independent Commission Against Corruption Advisory Committee on Corruption; (2) Non-executive Director of Urban Renewal Authority Board; and (3) Member of Honours and Non-official Justices of the Peace Selection Committee.

On December 12, 2025, the Government established the Independent Committee to examine the causes of the incident and related issues, ascertain the facts, and make recommendations on preventing similar tragedies and on improvement measures. The Independent Committee is chaired by Mr Justice David Lok, with Mr Chan Kin-por and Dr Rex Auyeung Pak-kuen serving as members. The Independent Committee held its first meeting on December 19 last year and aims to complete its work within nine months of commencing operations.

Mr Chan Kin-por wrote earlier to the Chief Executive, expressing his wish to suspend the aforementioned three public positions until the Independent Committee completes its work, in order to dedicate more time and focus to the Independent Committee's tasks. The Chief Executive has agreed to and approved the request.

A Government spokesperson said that since the fire at Wang Fuk Court in Tai Po, both the Government and the wider community have been highly concerned about the causes of the incident and the follow-up work. The scope of the Independent Committee's work is extensive, particularly concerning systemic issues related to bid-rigging and connected interests. Given the numerous issues involved and their complex nature, the Government will fully co-operate with the Independent Committee to ensure that it can complete its work and compile its report within nine months. The Government extends its gratitude to Mr Chan for accepting the appointment as a member of the Independent Committee and for his professional and conscientious approach to the Committee's work. When the Independent Committee's work is completed, the Government looks forward to Mr Chan's continuous contribution through his aforementioned public positions.

Source: AI-found images