InvestHK, a Hong Kong Special Administrative Region government department responsible for promoting foreign direct investment, said on Monday that no personal data was compromised during a ransomware attack to its computer systems last month.   

The department said in a statement that its investigation showed no evidence indicating leakage of personal information during the malicious ransomware attack on Feb 22.

No further suspicious activities have been identified since the incident and InvestHK’s computer systems have largely resumed normal operations, the department added.

ALSO READ:InvestHK checks for data leaks following ransomware attack

InvestHK said it would continue to enhance its cyber resilience and cybersecurity risk management and follow the suggestions from the SAR government’s Digital Policy Office and experts in tightening its IT security systems to prevent similar incidents from happening again.

The department earlier said that the ransomware attack had targeted its internal Customer Relationship Management system, its intranet, and part of its website operations.

A series of data leakages have occurred in the SAR in recent years. Cyberport was comprised during a cyberattack in August 2023 when 400GB of data was stolen.

In March 2024, hackers broke into the South China Athletic Association’s network and the personal information of over 72,000 members were leaked, including their names, Hong Kong identity card numbers, passport numbers, photos, addresses, phone numbers, and email addresses.

READ MORE: Cybersecurity deficiencies led to sports club data leak

Two months later, the Fire Services Department discovered a potential data leakage incident involving personal information relating to about 5,000 staff members and 480 residents.

Another incident happened within the Electrical and Mechanical Services Department in December last year, when personal data relating to over 17,000 people was leaked.