Data Breach Alert: RansomHouse Targets Hong Kong College of Technology

Incident Date: Apr 26, 2024

Attack Overview
VICTIM
Hong Kong College of Technology
INDUSTRY
Education
LOCATION
Hong Kong
ATTACKER
Ransomhouse
FIRST REPORTED
April 26, 2024

RansomHouse Cyberattack on Hong Kong College of Technology

Overview of the Attack

The Hong Kong College of Technology (HKCT) recently fell victim to a cyberattack orchestrated by the ransomware group RansomHouse. The attackers targeted the college's primary website, hkct.edu.hk, and claimed to have exfiltrated approximately 450 GB of data. The specifics of the ransom demand have not been disclosed publicly, but a sample of the stolen data was released, indicating the severity of the breach.

Victim Profile: Hong Kong College of Technology

HKCT is a private vocational college in Hong Kong, known for its comprehensive range of sub-degree and degree programs aimed at promoting lifelong learning. The institution stands out due to its focus on both local and international education, offering numerous overseas postsecondary programs. HKCT is recognized as one of the 22-degree-awarding higher education institutions approved by the Hong Kong Government. With a workforce of between 1001 and 5000 employees, HKCT plays a significant role in the educational sector of Hong Kong.

Details of the Data Breach

According to analyses, the breach resulted in compromised credentials for 85 users, including employees, partners, and customers. An external surface attack analysis revealed vulnerabilities including one employee URL and 18 user URLs that were susceptible to hacker infiltration. This vulnerability highlights significant security gaps within HKCT's cyber defenses, making them a prime target for the data theft and extortion tactics employed by RansomHouse.

Implications for HKCT

The attack not only jeopardizes the personal and professional data of the individuals associated with HKCT but also poses a severe threat to the institution's reputation and operational security. The breach underscores the critical need for enhanced cybersecurity measures and continuous monitoring of network vulnerabilities.

Sources

See Halcyon in action

Interested in getting a demo?
Fill out the form to meet with a Halcyon Anti-Ransomware Expert!

1
2
3
Let's get started
1
1
2
3
1
1
2
2
3
Back
Next
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.