
A global data leak involving online learning platform Canvas has exposed the personal information of more than 72,000 students and staff across Hong Kong educational institutions, with two local police reports already filed in connection with the breach.
Chief Superintendent Raymond Lam Cheuk-ho of the force’s cybersecurity and technology crime bureau said one report was from a local education institution, while the other concerned a resident who received a suspected fraudulent message linked to the Canvas leak.
He said on Tuesday that the resident who reported the case had discovered a notification claiming the Canvas platform system on their device needed fixing.
“An interface claiming to offer technical fixes popped up, with a phone number attached for the resident to call,” Lam said.
But the chief superintendent warned that the number belonged to a scammer, who would attempt to dupe callers under the guise of offering technical support.
The force urged local businesses to pay attention to the security of their third-party service providers and supply chain operators, while warning individuals to stay alert for phishing messages.