Hong Kong Airlines, Yoho and Broadway data breach

What happened

Hong Kong's Privacy Commissioner for Personal Data (PCPD) said on October 26, 2026 that it had received data breach notifications from Hong Kong Airlines, electronics retailer Yoho and camera retailer Broadway after their customers received suspected scam calls, and has opened investigations. Hong Kong Airlines reported on October 2 that 815 passengers departing between September 29 and October 22 received such calls; their names, phone numbers, flight dates, flight numbers and routes may have been exposed. Yoho reported on October 5 that 790 customers who ordered between September 29 and October 12 received calls; names, phone numbers, delivery addresses, order numbers and products bought may have been exposed. Broadway notified the PCPD on October 26 (names, phone numbers, products bought and amounts paid) without a customer count, so the 1,605 figure covers only the first two companies and counts people who got calls, not records taken. How the data was obtained has not been explained; in one case police reported a retiree lost HK$1.2 million to callers posing as Hong Kong Airlines.

What should I do?

1. Hang up on callers who say your flight was cancelled or your order has a problem and offer refunds or compensation, even if they know your flight number or what you bought.
2. Never transfer money or give bank details, passwords or one-time passwords over the phone; call the company back on the number on its official website.
3. You can complain to the PCPD if you believe your personal data was mishandled.

Check the other services you use →