This is the most disturbing of all - the rest is just gossip. Who was the insider who obtained it - surely sharing it with a non-CX employee is illegal. And the fact that she shared it - knowing that this is CX confidential information (remember ignorance of the law does not hold up well in court) - means she has likely violated privacy laws.

I expect Stephen Wong, the decently proactive and useful privacy commission head in HK, will look into this matter.