Hong Kong Aircraft Engineering Company Limited (HAECO) has discovered that it has been named a victim of the Lockbit3.0 ransomware group. The threat actor threatens to publish HAECO’s data.

There is presently no impact on HAECO’s business or its operations worldwide.
 
Further to the posting, in the evening of 4 March 2023, HAECO uncovered evidence of personal data theft, and believes that the personal data of some of its current and former employees, as well as certain other individuals, may have been implicated. There is currently no evidence, however, that the data has been published. HAECO’s investigations in this regard are continuing.
 
To ensure the security of the data of all of its stakeholders, HAECO took immediate steps to mobilise a team of cyber security experts to contain the incident, to reinforce and enhance existing security measures, and to take all necessary steps to protect it against any unauthorised access to its network.
 
HAECO takes data security and privacy very seriously. Illegal access or any unlawful action that compromises the privacy or confidentiality of its data will not be tolerated.
 
HAECO is fully committed to safeguarding its business and data. The incident has been reported to the relevant authorities (including the Hong Kong Police Force and the Office of the Privacy Commissioner for Personal Data) and HAECO will continue to assist and liaise with all relevant authorities, organisations, and parties, to ensure that all of its statutory responsibilities are met. HAECO will also be contacting potentially affected parties and individuals to inform them about the incident.

  -End-