SFC reprimands and fines Luk Fook Securities (HK) Limited $2.1 million for inadequate cybersecurity control to fend off cyberattack
No description available.
The SFC has reprimanded and fined Luk Fook Securities (HK) Limited HK$2.1 million for systemic failures to implement fundamental cybersecurity controls, which left its core infrastructure vulnerable to a ransomware attack and caused a roughly three‑week disruption to client trading services. This action reinforces that cybersecurity requirements for Hong Kong licensed corporations are treated as core conduct and governance obligations, and that basic control failures (firewalls, patching, access management, backups, training) will be sanctioned even in the absence of direct client financial loss.
AI-generated analysis. May contain errors or omissions — verify with the original SFC source before acting. Full disclaimer.