Hong Kong Security Report — February 26, 2026

Security analysis based on open-source intelligence and web research. Period: February 19 — February 26, 2026.

Hong Kong Security Analysis Report: February 19-26, 2026

Executive Summary

During the period of February 19-26, 2026, Hong Kong's security landscape remained largely shaped by its robust national security framework and ongoing efforts to counter evolving threats. A significant development was the continued enforcement and international scrutiny of the Safeguarding National Security Ordinance (Article 23), highlighted by a court conviction related to an exiled activist's family member, drawing criticism from human rights groups. Cybersecurity emerged as a critical concern, with a recent report revealing a record surge in incidents in 2025 and identifying AI-driven attacks as a top risk for 2026. Maritime security saw routine updates regarding naval escort arrangements in the Gulf of Aden and localized traffic controls for public events. Overall, the focus remained on strengthening internal security mechanisms, integrating with mainland China's strategic objectives, and addressing modern threats like cyber warfare and "soft resistance."

Key Security Developments

• National Security Legislation Enforcement and International Scrutiny
  On February 11, 2026, a Hong Kong court convicted the father of exiled pro-democracy activist Anna Kwok under Article 23 of the Basic Law, marking a new threshold in the persecution of activists by targeting their family members. This development prompted rights groups, including Amnesty International, to urge the High Commissioner on February 24, 2026, to address China's deepening repression, arguing that the 2024 Safeguarding National Security Ordinance (Article 23) further curtails civil liberties. The legislation, which came into effect on March 23, 2024, expands offenses such as espionage, treason, and foreign interference, carrying penalties up to life imprisonment.

• Release of National Security White Paper
  On February 10, 2026, just prior to the reporting period, China's State Council Information Office released a white paper titled "Hong Kong: Safeguarding China's National Security Under the Framework of One Country, Two Systems." This document reaffirms the central government's fundamental responsibility for national security in Hong Kong and highlights the HKSAR's achievements in fulfilling its constitutional duty. The white paper emphasizes that national security is the necessary foundation for freedom and openness.

• Escalating Cybersecurity Threats
  The Hong Kong Computer Emergency Response Team Coordination Centre (HKCERT) released its "Hong Kong Cybersecurity Outlook 2026" on January 28, 2026, revealing a record high of 15,877 cybersecurity incidents in Hong Kong in 2025, representing a 27% year-on-year increase. The report identifies AI-related attacks and supply chain vulnerabilities as the top concerns for 2026. Phishing attacks constituted nearly 60% of incidents in 2025, with generative AI making them more sophisticated.

• Cybersecurity Preparedness Gaps
  HKCERT's report also highlighted that nearly 30% of enterprises in Hong Kong lack dedicated cybersecurity personnel. Small and Medium-sized Enterprises (SMEs) particularly lag behind larger enterprises in terms of technology deployment and resource allocation for cybersecurity. This indicates a significant vulnerability across the business sector that could be exploited by increasingly automated and targeted cyberattacks.

• Ongoing Cybersecurity Vigilance and Initiatives
  Throughout early February 2026, various security alerts and updates were issued by major technology providers like Microsoft, Juniper Networks, Google, Apple, Fortinet, OpenSSL, and QNAP, addressing multiple vulnerabilities in their products. This continuous stream of alerts underscores the persistent and dynamic nature of the global cybersecurity threat landscape, directly impacting Hong Kong's digital infrastructure. Upcoming events like the "AI Security and Cybersecurity Summit for Enterprises" on March 31, 2026, and the "PolyU x NuttyShell Cybersecurity CTF 2026" from March 6-8, 2026, demonstrate ongoing efforts to enhance local cybersecurity capabilities and awareness.

• Maritime Security Circular for Gulf of Aden Transit
  On February 20, 2026, the Hong Kong Marine Department issued Security Circular No. 02/2026, providing an update on the Chinese Naval Vessels Escort Arrangement for Hong Kong-registered ships transiting the Gulf of Aden. The circular states that Chinese naval escort services for March 2026 will be arranged based on individual ship applications, rather than a fixed convoy schedule. Shipowners are advised to submit "ship movement reports" via email to HKMRCC several days in advance to facilitate possible security coverage.

• Local Maritime Traffic Control for Public Events
  The Marine Department implemented strict marine traffic control and strengthened inspection of spectator vessels for the 2026 Chinese New Year Fireworks Display held on February 18, 2026. This included establishing a Closed Area off the Hong Kong Convention and Exhibition Centre and a Restricted Area in the Central Harbour. Additionally, a Restricted Area was established on February 25 and 26, 2026, off West Kowloon Waterfront Promenade for a drone show, prohibiting unauthorized vessels. These measures reflect routine security protocols for managing large public events in Hong Kong's waters.

• Focus on "Soft Resistance" as a National Security Threat
  Secretary for Security Chris Tang Ping-keung stated on February 1, 2026, that Hong Kong faces four primary risks to its national security, with "soft resistance" being one of the most significant threats. He defined "soft resistance" as using seemingly insignificant societal or livelihood issues, often with fake news, to stir discontent against the government. The police national security hotline has received 1.1 million reports since its inception in November 2020, with some leading to arrests, indicating the government's active monitoring of such activities.

• PLA Hong Kong Garrison Training
  The Chinese People's Liberation Army (PLA) Hong Kong Garrison commenced its military training for the 2026 training year on January 4, 2026. This training involves troops from the Army, Navy, and Air Force stationed in Hong Kong, aimed at enhancing combat capabilities and strengthening their ability to fulfill Hong Kong's defense responsibilities. While not a new event within the reporting week, it signifies the ongoing military presence and readiness in the region.

• Maritime Industry Development and Security Implications
  On February 25, 2026, the Hong Kong government announced plans to introduce an amendment bill in the first half of the year to enhance tax concession measures for the maritime service industry and revamp ship registration arrangements, including permitting dual registration. These initiatives aim to consolidate Hong Kong's position as an international maritime center and promote smart logistics. While primarily economic, a robust and well-regulated maritime industry contributes to overall maritime security and control.

Geopolitical Impact and Regional Dynamics

Hong Kong's security developments during this period are deeply intertwined with broader geopolitical dynamics, particularly concerning its relationship with mainland China and Western powers. The continued emphasis on national security, underscored by the recent white paper and the enforcement of Article 23, solidifies Beijing's control over the Special Administrative Region. This narrative, promoted by China, frames the measures as essential for stability and prosperity under the "One Country, Two Systems" framework. However, the application of these laws, particularly the conviction of an activist's family member, continues to draw strong criticism from international human rights organizations and some Western governments, who view it as an erosion of Hong Kong's autonomy and civil liberties. This divergence in interpretation fuels diplomatic tensions, with Western nations often expressing concerns about the rule of law and human rights in Hong Kong.

Economically, Hong Kong is strategically reorienting its focus to align more closely with mainland China's "15th Five-Year Plan," aiming for deeper integration into national development strategies. Concurrently, Hong Kong is actively seeking to diversify its economic partnerships globally, particularly in emerging markets in Eastern Europe and Central Asia, to mitigate risks and foster new growth. This dual approach reflects an attempt to balance integration with China with maintaining its international financial hub status, albeit under increasingly stringent national security parameters. The geopolitical tensions, including debates over trade and tariffs, continue to create uncertainty in global markets, impacting Hong Kong's economic outlook.

China's broader diplomatic push, characterized by visits from Western leaders to Beijing in early 2026, suggests a "turning towards the East" by some Western nations, driven by economic interests and a desire for stability. This could subtly influence the international community's approach to Hong Kong, potentially leading to a more pragmatic, albeit still critical, engagement. For Hong Kong, this means navigating a complex environment where its internal security policies are constantly scrutinized by some international actors while simultaneously being championed by Beijing as a model for stability. The ongoing cybersecurity threats, particularly AI-driven attacks and supply chain vulnerabilities, also have regional implications, as Hong Kong's digital security is integral to regional financial stability and data flow.

Military and Defense Analysis

Hong Kong's military and defense posture is primarily defined by the presence and role of the Chinese People's Liberation Army (PLA) Hong Kong Garrison. The Garrison's commencement of its 2026 military training year on January 4, 2026, involving Army, Navy, and Air Force troops, underscores Beijing's commitment to maintaining defense capabilities and fulfilling its responsibilities in the region. This training is aimed at enhancing combat readiness, which is a standard operational procedure for any military force. While specific details of exercises during the reporting week were not available, the general training cycle indicates a continuous effort to ensure the Garrison's effectiveness.

Defense spending trends and modernization programs for Hong Kong itself are not independently reported, as its defense is integrated into China's national defense system. The PLA Garrison's capabilities are part of the broader modernization efforts of the Chinese military. The "Hong Kong Defense Fair 2026," scheduled to be a global gathering for defense industry brands, suggests an interest in showcasing advanced weapon systems, tactical vehicles, aerospace technology, information warfare solutions, cybersecurity tools, and surveillance equipment. While this is an exhibition and not necessarily indicative of Hong Kong's direct defense acquisitions, it highlights the region's exposure to and potential role in the broader defense technology landscape, possibly as a platform for trade or technological exchange within the Chinese defense industry.

The Marine Department's Security Circular regarding Chinese Naval Vessels Escort Arrangement for Hong Kong-registered ships in the Gulf of Aden demonstrates a practical aspect of China's naval reach and its provision of security services to its flagged vessels, including those from Hong Kong. This highlights Hong Kong's integration into China's maritime security strategy, particularly in safeguarding international shipping lanes. The overall force posture in Hong Kong remains one of internal security maintenance, with the PLA Garrison serving as the ultimate guarantor of national security, complementing the local disciplined services.

Outlook and Forecast

Short-term trends (1-3 months): In the immediate future, Hong Kong will likely continue to experience heightened vigilance regarding national security. The enforcement of the Safeguarding National Security Ordinance (Article 23) will remain a central theme, with further legal actions against individuals perceived as endangering national security or engaging in "soft resistance." International criticism from human rights groups and some Western governments is expected to persist, contributing to ongoing diplomatic friction. Cybersecurity will be a critical focus, with organizations and the government implementing measures to address the rising tide of AI-driven attacks and supply chain vulnerabilities identified in the "Hong Kong Cybersecurity Outlook 2026." The upcoming "AI Security and Cybersecurity Summit for Enterprises" in March 2026 will be a key event for discussing and coordinating responses to these threats. Routine maritime security measures, such as those for public events and international shipping escorts, will continue as standard practice.

Critical flashpoints and risk areas: The primary flashpoints will revolve around the interpretation and application of national security laws, particularly concerning freedom of expression, assembly, and the judiciary. Any high-profile arrests or convictions under Article 23, especially involving individuals with international ties or their family members, could trigger renewed international condemnation and potential retaliatory measures from Western nations. The increasing sophistication of cyberattacks, particularly those leveraging AI, poses a significant risk to Hong Kong's financial infrastructure and critical information systems. A major cyber incident could disrupt economic activity and undermine confidence. Geopolitical tensions, particularly between China and the US, could indirectly impact Hong Kong through trade disputes or diplomatic pressures, affecting its economic stability and international standing. The concept of "soft resistance" as a national security threat also creates a broad and potentially ambiguous area for enforcement, leading to concerns about self-censorship and a chilling effect on civil society.

Indicators to monitor: Key indicators to monitor include the frequency and nature of arrests and prosecutions under the National Security Law and Article 23, particularly those targeting activists, journalists, or foreign entities. Observe statements and actions from international bodies and foreign governments regarding Hong Kong's human rights situation and autonomy. Track the number and severity of reported cybersecurity incidents, especially those involving critical infrastructure or financial institutions, and the effectiveness of government and industry responses. Monitor Hong Kong's economic performance and foreign investment trends, as these can be sensitive to perceptions of political stability and legal certainty. Finally, watch for any changes in the rhetoric or operational posture of the PLA Hong Kong Garrison, although significant shifts are unlikely to be publicly announced.

Strategic recommendations: For organizations operating in Hong Kong, it is crucial to conduct thorough due diligence on the evolving legal and regulatory landscape, particularly concerning national security and data privacy. Strengthening cybersecurity defenses, especially against AI-driven threats and supply chain risks, is paramount, including investing in dedicated personnel and advanced security technologies. Businesses should also assess their exposure to geopolitical risks and diversify supply chains and market access where feasible. For international actors, a nuanced diplomatic approach is recommended, balancing concerns over human rights and autonomy with engagement on economic and regional stability issues. Continuous monitoring of local sentiment and public discourse, even under restrictive conditions, can provide insights into potential social tensions.

Sources

• ishr.ch
• jurist.org
• wikipedia.org
• tbsnews.net
• freiheit.org
• amnesty.org
• www.gov.uk
• ocmfa.gov.cn
• chinadailyhk.com
• www.gov.cn
• youtube.com
• globaltimes.cn
• plataformamedia.com
• scio.gov.cn
• hkcert.org
• vir.com.vn
• taiwannews.com.tw
• infosec.gov.hk
• cybersecurity.hk
• mardep.gov.hk
• info.gov.hk
• mardep.gov.hk
• scmp.com
• mod.gov.cn
• news.gov.hk
• midasanalytics.ai
• scmp.com
• chasedevere.co.uk
• chamber.org.hk
• expowindow.com