Last updated
Hong Kong Airlines: Cybersecurity Incident
Hong Kong Airlines leaked customers' personal information; about 2,000 affected customers (across this and two retailers) received scam calls, and the privacy watchdog (PCPD) is investigating.
Source: Hong Kong Free Press
- Who
- Hong Kong Airlines · Hong Kong
- What happened
- Hong Kong Airlines leaked customers' personal information; about 2,000 affected customers (across this and two retailers) received scam calls, and the privacy watchdog (PCPD) is investigating.
- When
- 2026-10-27
- Source
- Hong Kong Free Press
- So what
- A breach is a governance event before it is a technical one.
The leadership read
A breach is a governance event before it is a technical one. For Hong Kong Airlines in the sector, the hiring consequence is rarely more engineers; it is senior accountability: security, risk and data governance reporting high enough to change decisions. Across Asia, watch whether the response is a hire or a contractor; that distinction says how the board has read it.
Market context: This lands while the Talent Market Index reads 104.6 (Hot) — up 3.6 versus the prior month — and Asia signal share is steady (+1.1pts).
Hong Kong Airlines: 1 signal in the last 90 days.
MitchelLake in this thematic
More signals across Asia
Cybersecurity Incident · Asia
Spandana Sphoorty →Microfinance company Spandana Sphoorty reported a cyber fraud that led to unauthorized transactions of Rs 7.8 crore from a bank account, discovered on a Sunday. Services linked to the fraud were halted and investigations are underway.
Cybersecurity Incident · Asia
Videostrong Technology Co. →Google says Shenzhen-based Android manufacturing partner Videostrong secretly built a backdoor into about 1.3 million set-top boxes, turning them into a botnet used for ad fraud, data exfiltration and unauthorized traffic routing. Google dismantled the backdoor, cut ties, and banned the company from building or selling certified Android devices or supplying Android software.
Cybersecurity Incident · Asia
WorkOS →WorkOS disclosed a data security incident detected October 30, 2026, in which an unauthorized actor, reportedly using ARTEX (an AI-assisted autonomous penetration testing framework) from Hong Kong and China IP addresses, accessed an internal API used by sales and marketing tools. The actor reached Salesforce and Snowflake instances holding business contact information, CRM data, marketing contacts and support tickets for WorkOS customers. WorkOS says production services and application data were not accessed and the incident appears localized to CRM and customer support data.
Cybersecurity Incident · Asia
고위드 (Gowid) →Korean corporate card and expense-management fintech Gowid disclosed a breach on 27 Oct 2026. Customer data (contact names, emails, phone numbers, job titles, addresses, masked card numbers, GWS billing details) was exposed, and abnormal recurring charges hit its GWS subscription billing function. The company reported the incident to KISA and blocked the attack path, IP and affected payment function.
Cybersecurity Incident · Asia
Mirae Asset Global Investment →Mirae Asset Global Investment was also named as a victim in the same series of Korean financial-sector breaches, under FSS investigation.
Cybersecurity Incident · Asia
Broadway Photo Supply →Appliance and electronics chain Broadway (Broadway Photo Supply) was named in a Hong Kong privacy regulator investigation into a customer data breach, one of three retailers and airlines affected in the same wave of incidents.
Where this lands in our work
- Executive Search →
A breach puts the security, technology and risk seats under review; those searches run through our executive search practice.
- Executive Search: Asia →
Our Asia practice runs the searches behind signals like this one.
Intelligence powered by Autonodal ↗