On 3–4 April 2026, Hong Kong’s Hospital Authority disclosed a major leak involving patient data from the Kowloon East cluster, including identity card numbers and surgical details. Officials initially emphasized no cyberattack on core hospital networks and suspended a contractor’s maintenance work; follow-on reporting described law-enforcement action.
Canonical record: Hospital Authority (Hong Kong) 2026 on BreachHistory.
Sources: news.gov.hk, South China Morning Post