https://www.scmp.com/print/news/hong-kong/law-and-crime/article/3261177/cyberattack-hong-kong-consumer-watchdog-due-lack-security-measures-report But they only need one security measure - Wave.