Dr. Cindy Chan reports loss of hard drive containing client data

Clinical psychologist Dr. Cindy Chan said a company hard disk containing client data was lost during transport on Aug. 31, affecting more than 5,000 clients. Chan said the data was encrypted, reported the incident to police and regulators, and is offering free consultations to affected clients.

Why it matters: - The loss involved client information from a Hong Kong psychology practice and may affect more than 5,000 people. - Dr. Cindy Chan said the hard disk and the personal data on it were encrypted, which could reduce the risk of misuse. - The incident raises privacy and trust concerns for clients of Cindy Chan Psychological Services and Morphoziz Limited.

What happened: - Dr. Cindy Chan, founder and director of Cindy Chan Psychological Services and Morphoziz Limited, issued a formal statement on Sept. 17, 2026. - The statement said a company hard disk containing client data was lost during transportation for work on Aug. 31, 2026. - Chan said the loss was accidental and apologized to more than 5,000 affected clients. - The incident was reported to police on Aug. 31. - Chan also held follow-up discussions with the Office of the Privacy Commissioner for Personal Data, the Department of Justice and the High Court.

The details: - The hard disk was password-locked and encrypted. - Personal identifiable information in the database was also encrypted. - Chan said the dual protection significantly reduces the risk of data leakage or exploitation. - Chan has practiced since 2001 as a clinical psychologist in Hong Kong, including psychotherapy and forensic expert witness work. - Chan is offering free consultations to affected clients who need support. - Clients can contact Dr. Cindy Chan at 852-92663000, 852-93825262 or email drcindychan.client.support@pm.me. - Chan warned clients to stay alert for anonymous texts, phone calls or emails that appear unusually familiar with their personal histories. - Chan said clients who receive emails, texts or calls claiming to be from Morphoziz Limited should verify that the correspondence includes both the English and Chinese company names. - Chan said she will not discuss details of previous psychological assessments or treatments by phone, email or text, and will only do so in face-to-face meetings. - Chan said she is stepping down from providing psychotherapy or forensic assessment to new clients. - Chan warned people to be cautious about social media ads claiming she is offering one-on-one services.

Between the lines: - The warning suggests the lost data could be sensitive enough to raise concerns about impersonation, targeted scams or unwanted contact. - The emphasis on in-person verification indicates the practice is trying to limit remote disclosure risks after the incident. - The shift away from new psychotherapy and forensic assessment clients may reflect a tighter control on access and communications.

What's next: - Affected clients are being asked to monitor for suspicious communications and report suspected impersonation to police. - Further regulatory or legal follow-up could emerge after notifications to the privacy commissioner, justice officials and the court. - Clients needing help can seek the free consultations Chan has offered.