In recent years, there has been a troubling rise in the number of data breaches occurring within various departments of the Hong Kong government. These breaches have not only compromised the personal information of thousands of citizens but have also exposed the vulnerabilities in the governmental data security measures. The most recent incidents highlight an urgent need for a comprehensive review and enhancement of information security practices, especially at a time when digital transformation is accelerating.
The sequence of breaches began in August last year when Cyberport was hacked, and continued up to the recent revelation of potential data leakage in the Fire Services Department’s computer system. In just eight months, six major data breach incidents have been recorded, leading to massive thefts of personal data which was even made available online, prompting public concern and scrutiny.
Honorary President of the Hong Kong Information Technology Commerce Association, Mr. FONG, pointed out that many departments had previously ignored the government’s directives, such as the prohibition on storing personal data on third-party cloud platforms, which led to these incidents. Following these breaches, the Office of the Government Chief Information Officer issued directives to all departments to review their information security measures within a week.
Mr. FONG emphasized the vulnerability of smaller departments compared to larger ones like the Police and Immigration Departments. He noted that smaller scale departments often lack sufficient IT personnel, leading to weaker security measures. On the positive side, keeping departmental data contained can prevent it from being transmitted to other departments, thereby reducing the risk of leaks and creating a ‘firewall’ effect. However, he underscored the need for the government to further strengthen the security of government servers to prevent repeated mistakes.
The imminent establishment of a Digital Policy Office was announced by the Director of the Innovation and Technology Bureau, Mr. Sun Dong. This office is expected to bolster digital policies and advance the construction of a digital government, providing more support to departments in terms of information security.
Data breaches not only expose personal information such as email addresses, names, phone numbers, and identity card numbers, but they also open up avenues for fraud. Criminals can use this data to deceive victims by posing as banks or government departments to gain their trust and potentially steal from them. Moreover, Mr. FONG highlighted that not only government departments but also many private companies have experienced similar incidents, affecting a broad swath of individuals.
Amid these challenges, it’s clear that the adoption of blockchain technology could offer significant advantages in enhancing data security within government operations. Blockchain’s inherent characteristics—decentralization, transparency, and immutability—make it a promising solution to prevent unauthorized data access and ensure data integrity.
By integrating blockchain into their digital infrastructure, government departments can create a more secure and transparent system for managing public data. This would not only help in mitigating the risk of data breaches but also enhance public trust in how their information is handled. The future of government data security in Hong Kong could depend significantly on how swiftly and effectively blockchain technology is adopted in the fight against data breaches.
