Hong Kong Registration and Electoral Office laptop theft

On 27 March 2017, just one day after Hong Kong's Chief Executive election, the Registration and Electoral Office (REO) discovered that two laptop computers had vanished from a locked storeroom — and with them, the personal data of all 3.7 million registered voters in the territory.

What happened

The two notebook computers had been placed on 22 March in a locked room at AsiaWorld-Expo, the large conference venue near Hong Kong International Airport that served as the fallback site for the 26 March election. The election itself proceeded at the main venue, where the 1,194-member Election Committee selected Carrie Lam as Chief Executive.

When staff checked the storeroom on 27 March, the laptops were gone. The REO reported a suspected theft to police and notified the Office of the Privacy Commissioner for Personal Data.

What was exposed

• One laptop held the registration data of all 3.7 million voters in geographical constituencies, including names, Hong Kong identity-card numbers, physical addresses, and mobile phone numbers.
• The other laptop contained the names of the 1,194 Election Committee members.

The REO stressed that the data was encrypted and said there was "no information so far showing any leakage of the relevant information." Critics, however, questioned why a complete copy of the entire electoral roll needed to be stored on portable computers at a backup venue at all, and pressed for details on the strength of the encryption and key handling.

Impact and response

This was, at the time, the largest loss of personal data in Hong Kong's history. Although no downstream misuse was ever confirmed, the breach badly dented public confidence in the government's handling of sensitive civic data. The episode triggered a security review of the REO's data-handling practices, and the government later reported remedial measures to the Legislative Council, including tighter controls on when and where bulk voter data could be copied and stored.

Why it matters

The REO theft is a landmark case in physical-security and data-minimisation failure. No sophisticated hacking was involved — the entire electorate's records walked out of a locked room on two laptops. It underscored principles that now anchor government data governance: do not replicate entire population databases onto portable devices, enforce strong, auditable encryption when bulk personal data must travel, and treat physical custody of devices as a first-order security control. For Hong Kong, it became the reference incident driving reform of how electoral and citizen data are stored and transported.