Hong Kong's Privacy Commissioner for Personal Data released its investigation report on a data breach on the Consumer Council, the South China Morning Post reports. The PCPD found the Consumer Council did not enable multifactor authentication and did not disclose the breach in a timely manner. Meanwhile, the Consumer Council responded to the PCPD's findings, saying it is working to improve "its IT policies and guidelines and engaging managed detection and response services provider to enhance its ability to defend against cyberthreats."