Hong Kong’s privacy commissioner is to launch a compliance investigation into Cathay Pacific Airways Ltd (國泰航空) over a data breach involving 9.4 million passengers, saying that the carrier might have breached privacy rules.
The airline has faced criticism for the seven-month delay in its revelation last month of the breach in the data, which it said had been accessed without authorization, following suspicious activity in its network in March.
“There are reasonable grounds to believe there may be a contravention of a requirement under the law,” Hong Kong Privacy Commissioner for Personal Data Stephen Wong (黃繼兒) said in a statement.
“The compliance investigation is going to examine in detail, amongst others, the security measures taken by Cathay Pacific to safeguard its customers’ personal data and the airline’s data retention policy and practice,” he added.
It would also cover Cathay’s fully owned subsidiary, Hong Kong Dragon Airlines Ltd (港龍航空), or Dragon Air, some of whose passengers were affected by the breach.
A Cathay spokeswoman said in an e-mail to reporters that the airline was studying the statement and would “continue to cooperate fully with the authorities.”
The privacy watchdog said it had received 89 complaints related to the data breach.
In addition to 860,000 passport numbers and about 245,000 Hong Kong identity card numbers, the hackers accessed 403 expired credit card numbers and 27 credit card numbers with no card verification value, Cathay said.
It was not immediately clear who was behind the personal data breach or what the information might be used for, but Cathay said that there had been no evidence that any personal information had been misused.
Under Hong Kong law, the privacy commissioner can call witnesses, enter premises and hold public hearings in the investigation, which would check if Cathay contravened any requirement of the Personal Data (Privacy) Ordinance.
The controversy has spurred calls from politicians and privacy advocates for Hong Kong to revamp its laws to make the reporting of such potential data breaches mandatory.
Cathay’s share price initially plunged to its lowest since June 2009 after the scandal, but has rebounded and recovered all its losses.
The data breach came amid an airline turnaround to cut costs and boost revenue after back-to-back years of losses, so as to better compete with rivals from the Middle East, China and budget airlines.
Cathay Pacific in August posted a narrower half-year loss on a strong rise in airfares and cargo rates, and flagged expectations for a better second half, despite economic headwinds from mounting US-China trade tension.
From the customer’s perspective, car rental is a straightforward business. The only uncertainty is whether the hire company will charge you for the scratch they discover when you hand back the vehicle. Hertz Global Holdings Inc’s bankruptcy protection filing on Friday last week was a reminder that today even the simplest business models are underpinned by a lot more financial complexity than meets the eye. The proximate cause of Hertz’s demise was of course the sudden collapse in bookings caused by COVID-19 travel restrictions. The company’s monthly revenue last month fell 73 percent year-on-year, a shortfall that even the most resilient
Uber Technologies Inc, Lyft Inc and Airbnb Inc have slashed thousands of jobs. Salesforce.com Inc and Visa Inc are letting employees work remotely for months; Twitter Inc and Square Inc are allowing them to do so for good. For the companies’ hometown of San Francisco, the moves are early signs of a dire blow. In a city with a long history of booms, busts and natural calamities, the COVID-19 pandemic has suddenly upended nearly a decade of prosperity. While municipalities across the US are grappling with economic fallout from the virus, San Francisco stands to take a deeper hit given its high
BULK PURCHASE: The French chain and Hong Kong-based Dairy Farm International reached a deal covering 224 stores, which is expected to be finalized by year’s end Carrefour SA yesterday announced it would acquire Wellcome Taiwan Co (惠康百貨) for 97 million euros (US$108.33 million), and bring all the Wellcome supermarkets (頂好超市) and Jasons Market Place stores nationwide under its banner within 12 months of the deal closing. The France-based hypermarket chain reached an agreement with Hong Kong-based Dairy Farm International Holdings (牛奶國際控股), the pan-Asian retailer that launched Wellcome Taiwan in 1987. The transaction involves 199 Wellcome supermarkets, which have average sales areas of 420m2 and 25 high-end Jasons Market Place stores, which have an average sales area of 820m2, as well as a warehouse in Taoyuan, Carrefour Taiwan (家樂福)
‘ONE-STOP SHOP’: A Miaoli official said that the factory in the Jhunan section of the Hsinchu Science Park would create more than 1,000 jobs and boost prosperity A new high-end IC packaging and testing plant planned by contract chipmaker Taiwan Semiconductor Manufacturing Co (TSMC, 台積電) in Miaoli County is expected to start operations in the middle of next year, Miaoli County Commissioner Hsu Yao-chang (徐耀昌) said. Hsu wrote on Facebook that TSMC, the world’s largest pure wafer foundry operator, would invest NT$303.2 billion (US$10.1 billion) to build the plant, the largest-ever single investment in Taiwan. However, TSMC declined to disclose the financial terms of the deal, while a company board meeting on May 12 approved a spending plan worth NT$168.2 billion as part of its investment plans. Construction of the