Thousands of patient files may have been compromised by a suspected hacking of the Health Department.
Public broadcaster RTHK is reporting that as many as 17,000 patients may have had their personal and medical records exposed.
Health officials said the server that links patient databases has been taken offline and police are investigating.
The Health Department said it found some suspicious files on a computer server on Tuesday.
Initial investigations showed the files had been saved about 10 days ago.
The server is only used for primary schools to upload student information before doctors and nurses visit to conduct vaccinations.
No student information was stored on the server.
However, officials said a hacker might have used the server to gain access to two of its computer systems, according to RTHK.
One of them contains 17,000 temporary files with patient information.
The incident has been reported to the Office of the Privacy Commissioner.
– Contact us at [email protected]