Thestandard.Hk Data Breach Exposes Personal Info of Nearly 17,000 Mainland Exam Candidates
Article Content
- •Nearly 17,000 candidates' personal data was leaked due to a cybersecurity breach.
- •The breach was confirmed on October 30, 2026, affecting specific international assessments.
- •HKEAA has initiated an inquiry and is cooperating with law enforcement and privacy authorities.
The Hong Kong Examinations and Assessment Authority (HKEAA) confirmed a cybersecurity breach affecting approximately 16,900 mainland Chinese students who registered for two international exams. The compromised data includes candidate names, dates of birth, and email addresses. The breach was discovered on October 30, 2026, and has been reported to the police and the Office of the Privacy Commissioner for Personal Data. HKEAA has apologized to those affected and is taking steps to mitigate the impact, including notifying affected candidates directly. The authority assured that major assessment systems, such as the Hong Kong Diploma of Secondary Education Examination, remain unaffected. Technical teams are conducting a full security review to identify the breach's root cause and enhance monitoring protocols.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track Hong Kong Examinations And Assessment Authority in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What information was leaked?
What steps is HKEAA taking?
Are other examination systems affected?
Continue Reading
North Korean Hackers Steal $6.3 Billion from Binance in Record Crypto Heist On October 29, 2026, Binance, the world's largest cryptocurrency exchange, reported a massive security breach resulting in the theft of approximately $6.3 billion across ten blockchains. The attack is attributed to North Korea's TraderTraitor hacking group, which gained access via a compromised DevOps engineer's… 
China-Linked Hackers Exploit PHP2Shell Vulnerabilities to Breach U.S. Government Systems On October 21, 2026, the PHP development team released patches for two critical vulnerabilities in PHP, known as PHP2Shell (CVE-2026-109618 and CVE-2026-109619), which allow unauthenticated remote code execution. These vulnerabilities were actively exploited by a suspected China-linked threat actor who compromised 25…