Hong Kong intern doctor arrested for unauthorized patient data access

An intern doctor in Hong Kong has been arrested and fired after an investigation revealed she accessed patient data without authorization. The 24-year-old woman was taken into custody on Friday evening (June 12, 2026) at Caritas Medical Centre, where she allegedly used another doctor's login credentials to browse patient records from Tuen Mun Hospital. The Hospital Authority reported receiving an anonymous tip claiming the intern used a Tuen Mun Hospital doctor's account during work hours to access the computer system. After suspending both the intern and a resident doctor, the authority verified the allegations through internal investigation and computer records, confirming unauthorized access on May 13 and 14. The intern was subsequently terminated for violating medical ethics, infringing patient privacy and professional confidentiality, and failing to follow instructions during medical procedures. She is currently being detained for further investigation.

The case underscores serious concerns about insider threats to patient data security in healthcare settings. The intern's actions, though limited to browsing records, breach strict confidentiality laws and hospital protocols. The Hospital Authority's swift response—suspension, termination, and police referral—signals a zero-tolerance approach to unauthorized access. However, the incident also highlights vulnerabilities: a single anonymous report triggered the investigation, suggesting that without such whistleblowing, such breaches might go undetected. Healthcare institutions may need to strengthen audit trails, enforce multi-factor authentication, and provide clearer training on data access policies to prevent future incidents. The case is now under police investigation, with potential legal consequences including charges of accessing a computer with dishonest intent.