Skip to main content

Legal Update

VTech Hack – Largest Cybersecurity Breach Affecting Children

10 December 2015
Mayer Brown Legal Update

On 14 November 2015, VTech Holdings Limited (VTech) was hacked, resulting in the personal data of about 6.4 million children and 4.9 million parents being compromised worldwide. Out of the more than 11 million people involved, 5 million of them had their data stolen. This is the largest cyber attack affecting children's data worldwide. Investigations in Hong Kong, the United States and Britain are currently underway. Ironically, the VTech hack occurred shortly after both the current and former Hong Kong Privacy Commissioner (PC) raised concerns on the widespread collection and use of children's personal data.

On 1 December 2015, following the VTech hack, the PC issued a guidance note on the Collection and Use of Personal Data through the Internet – Points to Note for Data Users Targeting at Children (Guidance on Collection of Children's Data) and a leaflet entitled Children's Online Privacy – Practical Tips for Parents and Teachers (with advice on how parents and educators should get involved in children's online activities, etc). The Guidance on Collection of Children's Data highlights the fact that children are a vulnerable group, and extra caution is required when handling their personal data.


  • Gabriela Kennedy
    T +852 2843 2380
  • Karen H. F. Lee
    T +852 2843 4452
The Build a Report feature requires the use of cookies to function properly. Cookies are small text files that are placed on your computer by websites that you visit. They are widely used in order to make websites work, or work more efficiently. If you do not accept cookies, this function will not work. For more information please see our Privacy Policy

You have no pages selected. Please select pages to email then resubmit.