OT&P Healthcare

OT&P Healthcare is a healthcare group headquartered in Hong Kong. The organisation provides medical services to patients through its clinic network. It maintains a management and operating system that supports its clinical and administrative operations. Its services are delivered to individuals residing in the Hong Kong region. The group focuses on delivering healthcare while managing the underlying IT infrastructure that powers its operations.

On May 4, 2023, OT&P Healthcare experienced a cyberattack targeting its management and operating system. The incident potentially exposed the personal data and medical history of approximately 100,000 patients. Among the compromised information were some patients' Hong Kong identity card numbers and passport numbers. The investigation determined that financial data was not accessed during the breach. The scale of the affected patient base highlights the organisation's reach within the local healthcare market.

In response to the attack, OT&P Healthcare promptly took its affected systems offline to contain the incident. The organisation engaged third‑party forensic experts to conduct a detailed investigation of the breach. Patients and relevant regulatory authorities were notified in accordance with data breach disclosure requirements. These actions demonstrate the group's emphasis on incident response, patient privacy protection, and cooperation with oversight bodies. Managing both clinical services and the associated IT platform reflects an integrated approach to healthcare delivery and operational resilience.