March–July 2026: Hong Kong conglomerate Shun Hing Group—sole distributor of Panasonic and KDK products in Hong Kong and Macau—confirmed a cyberattack that exposed data on more than 921,000 individuals and encrypted files tied to roughly 1.05 million people, according to filings with Hong Kong's privacy regulator reported July 2, 2026.
What happened
Shun Hing detected unauthorized access on March 20, 2026, immediately reported the incident to police, and notified the Office of the Privacy Commissioner for Personal Data (PCPD). The company appointed independent cybersecurity specialists to investigate scope and strengthen network defenses.
Per Dimsum Daily, Shun Hing operates retail networks including PanaShop and Shun Hing Electronic Trading Co Ltd, employing more than 1,300 staff across home appliances, audio-visual, and healthcare product lines.
What data was exposed
Information submitted to the PCPD indicates:
- ~920,000 customers: names, addresses, telephone numbers, email addresses
- ~1,000 employees and suppliers: identity document numbers, bank account details, salary records
- ~1.05 million individuals: data reportedly encrypted in a malicious attack, potentially affecting about 1.045 million customers
What Shun Hing said
Shun Hing stated it implemented remedial measures, services remained unaffected, and it is committed to enhancing its cybersecurity framework. The PCPD urged affected individuals to remain vigilant against misuse of personal data.
Action items
- Change passwords on Shun Hing-linked accounts and enable multi-factor authentication where available.
- Monitor email and bank accounts for suspicious logins or unauthorized transactions.
- Be skeptical of messages citing real purchase or warranty details—verify through official Shun Hing or Panasonic channels.
- Wait for direct notice if you are a PanaShop or Shun Hing customer in Hong Kong or Macau.
Canonical record: Shun Hing Group cyberattack 2026 on BreachHistory.