On 7 March 2023, Hong Kong Aircraft Engineering Company Limited (HAECO) informed that it had discovered that it was named a victim of the Lockbit3.0 ransomware group. The group threatened to release certain data purportedly stolen from HAECO unless a ransom was paid. At this time, there is no evidence that data has been published. 

Further to our investigations, we can now confirm that the personal data of some of our current and former employees, as well as certain other individuals whom we have identified, was accessed without authorization. 

HAECO has already reached out to those affected to provide information and support. Although there is currently no evidence of misuse of their personal data, as a precaution, we are offering affected individuals complimentary access to credit monitoring services from TransUnion. Meanwhile, we continue to strongly recommend that the affected individuals remain vigilant and protect themselves against any potential risks arising from this incident. 

To ensure the security of the data of all its stakeholders, HAECO took immediate steps to mobilise a team of cyber security experts to contain the incident, to reinforce and enhance existing security measures, and to take all necessary steps to protect it against any unauthorised access to its network. 

HAECO takes data security and privacy very seriously. Illegal access or any unlawful action that compromises the privacy or confidentiality of its data will not be tolerated. 

HAECO remains fully committed to safeguarding its business and data. The incident has been reported to the relevant authorities (including the Hong Kong Police Force and the Office of the Privacy Commissioner for Personal Data) and HAECO will continue to assist and liaise with all relevant authorities, organisations, and parties, to ensure that all its statutory responsibilities are met. 

There remains no impact on HAECO’s business or its operations worldwide. 

HAECO sincerely apologises for the inconvenience caused to those affected by the incident.

-End-