As described by Hong Kong's privacy watchdog, the data leak was so "serious" that it affected 17,000 residents who shared their confidential information such as telephone numbers and names during the COVID-19 pandemic.
Hong Kong Arts Development Council is latest target, following ransomware attacks on Union Hospital earlier this month and tech hub Cyberport last year.