SFC fines Luk Fook Securities $2.1M for cybersecurity failures
SFC reprimanded and fined Luk Fook Securities (HK) HK$2.1 million for inadequate cybersecurity controls that failed to prevent a cyberattack.
The SFC penalised a broker for cybersecurity control weaknesses exposed by a cyberattack. Reinforces regulatory expectations on internet trading cybersecurity standards for licensed intermediaries.
Confirms SFC's continued enforcement of cybersecurity guidelines for internet trading and client data protection.
Action Required
Benchmark cybersecurity controls against SFC guidelines and remediate gaps in intrusion prevention and monitoring.
Enforcement precedent reinforcing cyber resilience obligations across SFC-licensed firms.
Reassess cybersecurity control framework, penetration testing, and incident response against SFC's internet trading guidelines.
“SFC reprimanded and fined Luk Fook Securities (HK) Limited HK$2.1 million for inadequate cybersecurity controls that failed to fend off a cyberattack.”