Hong Kong's privacy watchdog has condemned the owner of an education platform for paying hackers who stole personal data from thousands of institutions. The commissioner argued the funds should have been invested in cybersecurity and questioned the return of the stolen data.