Scam callers used leaked airline and shop data to target 1,600 people

Scam callers in Hong Kong used real customer details from an airline and an online shop to phone about 1,600 people this month. The callers knew names, phone numbers and order or flight information, which made their stories sound believable. The city's privacy watchdog has opened investigations.

What happened

Hong Kong Airlines told the Office of the Privacy Commissioner for Personal Data (PCPD) on October 2 that 815 passengers had received suspected scam calls about flight cancellations and compensation. The passengers were due to depart between September 29 and October 22. Leaked details included names, phone numbers, flight dates, flight numbers and routes.

Online retailer YOHO reported on October 5 that 790 customers who ordered between September 29 and October 12 got fake calls about damaged parcels and refunds. Their names, phone numbers, delivery addresses, order numbers and product details were exposed. Broadway Photo Supply also reported a breach to the PCPD.

What is not known yet

The material does not say how the data got out or who is behind the calls. It also gives no details on the Broadway Photo Supply case, including how many people were affected. So far the PCPD has received 23 complaints and 20 inquiries about the three incidents.

What to do

• Check who is calling through the company's official channels.
• Look for scam alerts the merchant has issued.
• Never share sensitive details such as online banking credentials.

A caller who knows your order or flight is not proof the call is real.