约有5,000名与香港一所大学有关联的人可能在一次网络安全事件中个人数据被泄露，相关信息据称已在暗网被出售。
About 5,000 people linked to a university in Hong Kong may have had their personal data compromised in a cybersecurity incident, with information allegedly being offered for sale on the dark web.
暗网卖家宣传的资料 reportedly 包括香港都会大学（HKMU）学生的姓名、香港身份证号码、电话号码、地址以及绩点（GPA）。
Data advertised by dark web sellers reportedly included the names of Hong Kong Metropolitan University (HKMU) students, Hong Kong identity card numbers, telephone numbers, addresses and grade point averages (GPAs).
针对《南华早报》的询问，该大学于周日确认，已于11月4日发现信息安全事件，并于次日通过电子邮件通知所有教职工和学生。
In response to South China Morning Post inquiries, the university confirmed on Sunday that it had discovered an information security incident on November 4 and notified all staff and students by email the following day.
该大学表示，初步调查显示约5,000人可能受到影响。它称这些人的个人数据可能已被泄露。
The university said a preliminary investigation indicated that about 5,000 individuals could be affected. It said the personal data of some of those individuals might have been compromised.
涉及的数据包括姓名、出生日期、电话号码、居住地址和电子邮件地址，以及学费付款记录，包括付款日期和金额。但该大学补充称，数据泄露未涉及银行账户号码。
The data involved included names, dates of birth, telephone numbers, residential addresses and email addresses, as well as records of tuition fee payments, including payment dates and amounts. But it added that the data breach did not involve bank account numbers.
香港都会大学称已立即启动应急响应机制，包括停用受影响系统的功能以防止进一步攻击，并开展彻底调查和维护工作。
HKMU said it immediately activated its emergency response mechanism, including disabling functions of the affected system to prevent further attacks and conducting a thorough investigation and maintenance work.
该大学位于何文田的主校区，还聘请了独立的第三方网络安全顾问评估影响和风险，并审查系统安全。
The university, whose main campus is located in Ho Man Tin, said it had also engaged an independent third-party cybersecurity consultant to assess the impact and risks and to review system security.
发言人表示：“香港都会大学强烈谴责任何试图未经授权访问大学系统的行为，以及任何声称出售未经授权获取的数据的行为。”
“HKMU strongly condemns any attempt to gain unauthorised access to the university’s system and any claim of selling data obtained without authorisation,” a spokesman said.
该机构在2025-26学年拥有超过13,000名全日制本科生，表示已向警方报案并通知个人资料私隐专员公署。
The institution, which had more than 13,000 full-time undergraduate degree students in the 2025-26 academic year, said it had reported the case to police and notified the Office of the Privacy Commissioner for Personal Data.
香港都会大学表示，已直接联系可能受影响的个人并提供安全建议，同时提醒教职员工和学生重置大学账户密码，并保持对网络钓鱼企图和可疑通讯的警惕。
HKMU said potentially affected individuals had been contacted directly and provided with security advice, while staff and students were urged to reset their university account passwords and remain vigilant against phishing attempts and suspicious communications.
该校称，近期已再次通过电子邮件联系可能受影响的个人，提供事件的进一步细节和额外的安全建议。香港都会大学还敦促用户不要点击未知链接，也不要向未经验证的来源提供个人数据。该校表示，将继续跟进此事件，并在适当时提供进一步更新。
It said it had recently contacted potentially affected individuals again by email, providing further details of the incident and additional security advice. HKMU also urged users not to click on unknown links or provide personal data to unverified sources. It said it would continue to follow up on the incident and provide further updates as appropriate.
大学为给用户造成的不便和担忧致歉，并补充称正对其网络安全框架和安全措施进行全面审查，以加强对个人数据和信息系统的保护。
The university apologised for the inconvenience and concern caused, adding that it was conducting a comprehensive review of its cybersecurity framework and security measures to strengthen protection of personal data and information systems.
隐私监察专员办公室称，已于11月9日收到香港都会大学的资料泄露通知，距该校发现系统未经授权访问已有五天。
The privacy watchdog said it received a data breach notification from HKMU on November 9, five days after the university discovered the unauthorised access to its systems.
监察专员办公室表示，受影响个人的数量及涉及的个人资料仍在核实中，且已依据既定程序启动调查。
The watchdog said the number of affected individuals and the personal data involved were still being verified, and that an investigation had been launched in accordance with established procedures.