Assistant Privacy Commissioner for Personal Data (Compliance, Global Affairs and Research) (Assistant Privacy Commissioner), Mr Alex CHAN Chung-man, was interviewed by RTHK Radio 3’s “Backchat” on 19 May, where he explained the impact of the data breach incident involving the online learning management platform Canvas.
The Assistant Privacy Commissioner said that the Office of the Privacy Commissioner for Personal Data (PCPD) has received data breach notifications from seven organisations in connection with the incident. At present, there is no evidence indicating that any data subject has suffered losses as a result of the incident.
He noted that malicious actors may exploit the leaked personal data to craft highly convincing phishing emails, and that the data may also be used for identity theft or for gaining unauthorised access to other systems. He reminded members of the public not to click on suspicious links in emails. At the same time, organisations should establish a “human firewall” and strengthen staff awareness of data security. He also encouraged organisations to make use of the PCPD’s one-stop data security resources, including the “Data Security Thematic Website”, “Data Security Hotline” and various guidance materials.
Click
here to listen to the interview by RTHK Radio 3’s “Backchat”.