Last updated
Hong Kong Examinations and Assessment Authority: Cybersecurity Incident
HKEAA's information system was compromised, leaking names, dates of birth and email addresses of about 16,900 mainland Chinese-based students (nearly 17,000 affected) who applied for international exams.
- Who
- Hong Kong Examinations and Assessment Authority · Hong Kong
- What happened
- HKEAA's information system was compromised, leaking names, dates of birth and email addresses of about 16,900 mainland Chinese-based students (nearly 17,000 affected) who applied for international exams.
- When
- 2026-10-31
- So what
- A breach is a governance event before it is a technical one.
The leadership read
A breach is a governance event before it is a technical one. For Hong Kong Examinations and Assessment Authority in the sector, the hiring consequence is rarely more engineers; it is senior accountability: security, risk and data governance reporting high enough to change decisions. Across Asia, watch whether the response is a hire or a contractor; that distinction says how the board has read it.
Market context: Backdrop: a 104.6 (Hot) Talent Market Index (up 3.6 on the month) with Asia activity rising (+1.7pts).
Hong Kong Examinations and Assessment Authority: 1 signal in the last 90 days.
MitchelLake in this thematic
More signals across Asia
Cybersecurity Incident · Asia
Philippine Overseas Employment Administration →Government migrant-worker agency in the Philippines likely suffered a data breach: an unknown operator appears to have exfiltrated about 69GB of SQL Server backups in under 30 minutes, exposing migrant worker data.
Cybersecurity Incident · Asia
Coupang Inc. →Coupang continues to bear costs from a prior-year data breach, with customer compensation and regulatory pressure (a 624.7 billion won FTC fine) weighing on profitability; accumulated operating losses for the first nine months of the year reached 1.83 trillion won.
Cybersecurity Incident · Asia
Sogou →A China-aligned threat actor (SlippyNunchucks) hijacked DNS requests abusing insecure HTTP communications in the Windows version of Sogou Input Method to deliver the DarkVigil backdoor in a surveillance campaign observed since July 2026.
Cybersecurity Incident · Asia
Stockal Securities →Nearly 30 Indian investors allege unauthorised access to US-stock brokerage accounts on the Stockal platform, with holdings sold without consent and proceeds moved into Zhibao Technology (ZBAO) shares that later lost about 60% of value. Stockal attributes the access to phishing of customer credentials; DriveWealth, the US brokerage partner holding the accounts, points to security weaknesses at Stockal. Complaints filed with SEBI, the US SEC and Bengaluru police.
Cybersecurity Incident · Asia
VIQ →Collapsed Australian transcription provider VIQ faces a regulator-acknowledged possible security breach tied to court transcription work performed in India. The OAIC will not pursue the liquidated provider.
Cybersecurity Incident · Asia
Spandana Sphoorty →Microfinance company Spandana Sphoorty reported a cyber fraud that led to unauthorized transactions of Rs 7.8 crore from a bank account, discovered on a Sunday. Services linked to the fraud were halted and investigations are underway.
Where this lands in our work
- Executive Search →
A breach puts the security, technology and risk seats under review; those searches run through our executive search practice.
- Executive Search: Asia →
Our Asia practice runs the searches behind signals like this one.
Intelligence powered by Autonodal ↗