Department of Health, Hong Kong

The Department of Health for Hong Kong operates as a public health authority through several specialised branches, including the Infection Control Branch, Clinical Genetic Service, and Drug Office. These units indicate core responsibilities in disease surveillance and prevention, the provision of genetic health services, and the regulation of pharmaceuticals and drug safety. The department serves the population of Hong Kong, functioning as a key component of the region's health system with a mandate covering public health monitoring, clinical genetics support, and pharmaceutical oversight. Its work involves managing health-related data and implementing policies to safeguard community well-being, positioning it within the critical healthcare sector that handles sensitive information.

In July 2018, the department experienced a ransomware attack that encrypted files on three computers within its Infection Control Branch, Clinical Genetic Service, and Drug Office. The incident rendered certain files inaccessible, though attackers provided contact details for decryption keys without issuing a ransom demand. Authorities confirmed that no confidential personal data was compromised or leaked, a outcome attributed to the availability of backup systems. Police launched an investigation, suspecting financial motives and hypothesising that the intrusion may have resulted from unsafe browsing or email practices by users. This event occurred amid a documented global trend of healthcare organisations being targeted by cyberattacks, following a major medical data breach in Singapore, and paralleled recent local incidents involving telecommunications and travel companies where data theft and extortion were attempted. The department's response, relying on backups to prevent data loss, highlighted both the sector's vulnerability and the importance of robust data recovery protocols.