Hong Kong Science and Technology Parks Corporation said an unauthorised access incident affected an electronic tender system run by a third-party service provider. The information exposed included names, telephone numbers and email addresses, as well as tender numbers and subjects.
The corporation said it learned of the incident on November 1 and immediately shut the system. It commissioned an independent information-security consultant to review the system and assess the incident’s impact and risks. The tender system was operated separately from the corporation’s own systems, which were not affected, the corporation said.
The corporation is notifying affected people and companies, providing security advice and following up with them. The full scope of the affected information remains under investigation.