The Department of Health today alerted the public to suspicious emails and SMS messages sent by its HIV Testing Service website.
The department said the email account for the website is suspected of having been misused, with emails and text messages being sent to the public wrongly indicating that recipients were exposed to Human Immunodeficiency Virus (HIV), and should seek medical advice and get tested as soon as possible.
The department is conducting a thorough investigation into the incident. It said it has not yet found any evidence of data loss or leakage.
Emphasising that the emails and SMS messages were wrongly sent, the department highlighted that it does not notify individuals in this manner. It advised members of the public who receive suspicious emails or SMS messages not to click on any links contained in them or provide personal information. Anyone who has provided personal information to suspicious individuals or suspects that they have been scammed should contact the Police Force.
The department said it immediately conducted a comprehensive inspection of its network system with the outsourced service provider upon discovering the issue last night and also reported it to the force and notified the Digital Policy Office.
The HIV Testing Service website is suspended from today until cybersecurity experts have conducted a comprehensive investigation and review to confirm that there are no security risks. Members of the public can still call the Acquired Immune Deficiency Syndrome Hotline on 2780 2211 to arrange a free, anonymous and confidential HIV antibody test while the website is suspended.
The Government stressed that it attaches great importance to cybersecurity. The department conducts regular information security risk assessments, and will continue to review and enhance existing measures to keep abreast of the times in order to safeguard network and system security.