Suspected unauthorised use of email account of DH's HIV Testing Service website, involving no data loss or leakage
***************************************************************

     The Department of Health (DH) said today (October 24) that the email account for its HIV Testing Service website (www.hivtest.gov.hk) was suspected of being misused, with emails and text messages (SMS) sent to the public under the guise of the DH, claiming that the recipients are exposed to Human Immunodeficiency Virus (HIV), and should seek medical advice and get tested as soon as possible. The DH is conducting a thorough investigation into the incident and has not yet found any evidence of data loss or leakage.

     The DH emphasised that these emails and SMS messages were not sent by the DH, nor does the DH notify individuals in this manner. Members of the public who receive suspicious emails or SMS should not click on any links contained therein or provide personal information. Anyone who has provided personal information to suspicious individuals or suspects they have been scammed should contact the Police.

     Upon discovering the incident last night, DH staff immediately conducted a comprehensive inspection of the network system with the outsourced service provider and investigated the incident overnight. So far, no data loss or leakage has been detected. The DH reported the incident to the Police and notified the Digital Policy Office.

     The HIV Testing Service website will be suspended starting today until cybersecurity experts have conducted a comprehensive investigation and review to confirm that there are no security risks to the system. While the website is suspended, members of the public may still call the Acquired Immune Deficiency Syndrome Hotline (2780 2211) to arrange a free, anonymous and confidential HIV antibody test.

     The Government has always attached great importance to cybersecurity. The DH has also been conducting regular information security risk assessments, and will continue to review and enhance existing security measures to keep relevant measures abreast of the times in order to safeguard network and system security.

Ends/Saturday, October 24, 2026
Issued at HKT 14:21

NNNN