Gelonghui May 10 | Lukfook Group (00590.HK) issued an announcement. Around May 7, 2024, the group discovered an online post posted by a threat actor on the popular dark web (i.e. underground forum). The threat actor claimed to have access to the Group's customer records and invited bids for access to such records.

Once a potential incident is discovered, the Group immediately takes action to clarify the situation. The Group has carried out a thorough investigation with the assistance of a leading cyber security consulting firm, which includes an assessment of the truth and root cause of the potential incident, as well as a comprehensive review of the security of the Group's systems and servers. As of the date of this announcement, these investigations are ongoing, and it has not been possible to determine whether any of the Group's customer records have been leaked, and the extent (if any) of them. Once the investigation is completed, the Group will take further action as appropriate based on the relevant findings.

The Group has reported this potential incident to the Hong Kong Police Force and the Office of the Privacy Commissioner for Personal Data and will assist in the investigation. The Group will continue to strengthen information system security measures to protect customer data and privacy to prevent similar incidents in the future.