Web-based School Administrative and Management System

WebSAMS, also known as the Web‑based School Administrative and Management System, is a software platform designed to support the day‑to‑day operations of educational institutions. It provides modules for managing student enrolment, attendance, academic performance, staff records, financial transactions, and school allocation processes, all accessible through a web‑based interface. The system enables authorised users such as administrators, teachers, and parents to input, retrieve, and update information in real time from any location with internet connectivity. By consolidating multiple administrative functions into a single online environment, WebSAMS aims to improve efficiency and data consistency for schools that adopt it.

While the available sources do not specify the exact number of users or the geographic breadth of WebSAMS’s deployment, the platform has been implemented in schools across Hong Kong, indicating its use within the education sector of a Special Administrative Region of China. Its web‑based architecture distinguishes it from traditional on‑premise school management systems, offering centralized data storage and facilitating remote access without the need for local software installation. Because the system processes sensitive personal data—including student addresses, birth dates, contact details, parental names, academic records, staff information, and financial reports—it must comply with relevant data protection regulations and consequently attracts attention from cybersecurity threats. The platform’s focus on integrating diverse administrative tasks into a cohesive online solution positions it as a specialised tool for modernising school management practices.

In December 2019, WebSAMS was the target of a cyberattack that affected eight schools in Hong Kong, leading to confirmed data leaks at three institutions. The breach exposed a wide range of confidential information, prompting the Education Bureau to deploy specialists for investigation, issue security updates, and advise affected parties to report the incident to authorities. Police launched an inquiry under computer crime laws, although no arrests were reported, and one affected school confirmed unauthorised data retrieval before suspending system operations. The incident highlighted vulnerabilities in the platform’s protections and spurred broader scrutiny of its security measures. No details regarding WebSAMS’s ownership, parent company, or subsidiary structure are provided in the available sources.