2026 Shun Hing Group — March cyberattack; 921K+ individuals reported to HK privacy regulator
Data compromised
Per filing to Hong Kong Privacy Commissioner: ~920,000 customers (names, addresses, phone numbers, emails); ~1,000 employees/suppliers (identity document numbers, bank accounts, salary records); ~1.05 million individuals' data reportedly encrypted in malicious attack
Technical writeup
Verified incident — detected March 20, 2026. Shun Hing Group, the Hong Kong conglomerate and sole distributor of Panasonic and KDK products, confirmed hackers compromised its computer systems and reported the matter to police and the Office of the Privacy Commissioner for Personal Data (PCPD). The company appointed independent cybersecurity specialists to investigate. Information submitted to the privacy watchdog indicates personal data of more than 921,000 individuals may have been exposed, including roughly 920,000 customers and about 1,000 employees and supplier personnel. Shun Hing also reported that data of roughly 1.05 million individuals was encrypted in a malicious attack, potentially affecting about 1.045 million customers. The PCPD urged affected individuals to change passwords, enable MFA, monitor accounts, and review bank statements. Shun Hing stated remedial measures were implemented and services remained unaffected. Dimsum Daily reported July 2, 2026.
Root cause
Hackers compromised Shun Hing Group computer systems; intrusion detected March 20, 2026; reported to Hong Kong police and Privacy Commissioner for Personal Data
References
- https://www.dimsumdaily.hk/shun-hing-group-data-breach-affects-920000-customers-1-05m-files-encrypted-in-cyber-attack/
- https://databreaches.net/2026/07/03/hk-shun-hing-group-data-breach-affects-920000-customers-1-05m-files-encrypted-in-cyber-attack/
- https://www.scmp.com/news/hong-kong/law-and-crime/article/3359218/cyberattack-hong-kongs-shun-hing-group-affects-data-1-million-people
- https://www.marketing-interactive.com/shun-hing-data-breach-impacts-over-920000-customers