Hong Kong Security Report — July 12, 2026

Security analysis based on open-source intelligence and web research. Period: July 05 — July 12, 2026.

Executive Summary

Hong Kong experienced a dynamic security landscape between July 05 and July 12, 2026, marked by significant cybersecurity policy shifts and continued demonstrations of mainland China's sovereignty. The Securities and Futures Commission (SFC) implemented a ban on One-Time Password (OTP) logins for crypto platforms and internet brokers, directly addressing a surge in phishing attacks that saw 15,877 cybersecurity incidents in 2025. Concurrently, a Chinese People's Liberation Army (PLA) Navy fleet conducted a five-day port call, including public open-house events, reinforcing national defense modernization and patriotic education. The ongoing enforcement of national security laws continued to draw international scrutiny, with Western governments maintaining travel advisories due to concerns over civil liberties and legal ambiguities. These developments underscore Hong Kong's complex position, balancing economic stability and integration with mainland China against evolving security threats and international diplomatic pressures.

Key Security Developments

• PLA Navy Fleet Visit and Public Engagement
  A Chinese People's Liberation Army (PLA) Navy fleet, comprising the guided-missile destroyer Nanning and guided-missile frigate Hengyang, concluded a five-day port call to Hong Kong from July 2 to July 6, 2026. Public open-house events were held at the PLA Hong Kong Garrison's naval base on Stonecutters Island on July 4 and 5, attracting 14,000 residents. This visit, part of celebrations for the 29th anniversary of Hong Kong's return to China, aimed to showcase China's advancements in national defense and military modernization while fostering patriotism among Hong Kong residents.

• Cybersecurity Policy Tightening: OTP Ban
  On July 9 and 10, 2026, the Hong Kong Securities and Futures Commission (SFC) issued a circular mandating the phasing out of SMS, email, and app-based One-Time Password (OTP) logins for crypto trading platforms and internet brokers. This decisive action directly responds to a significant increase in cybersecurity incidents, with phishing and spoofing attacks accounting for 57% of the 15,877 incidents recorded in Hong Kong in 2025, a 27% rise from the previous year. Operators are required to adopt more phishing-resistant authentication methods, such as passkeys or device binding, within 12 months, with large brokers expected to comply immediately.

• Persistent Cybersecurity Threats and Incidents
  Beyond the OTP ban, the "Hong Kong Cybersecurity Outlook 2026" report, released in January 2026, highlighted a record high of 15,877 cybersecurity incidents in Hong Kong in 2025, with phishing remaining the dominant threat. The report also identified emerging risks for 2026, including AI-related threats and supply chain vulnerabilities. A significant cyberattack on the Shun Hing Group, reported on July 2, 2026, compromised the personal data of over 1 million people, including names, addresses, email addresses, and for 1,000 employees, identity card numbers, bank account details, and salary information.

• Continued Enforcement of National Security Laws
  The Ministry of State Security emphasized on July 1, 2026, the "success" of the National Security Law (NSL) in Hong Kong, reporting 394 arrests and 180 convictions since its implementation in June 2020. The Safeguarding National Security Ordinance (SNSO), enacted in March 2024 with revised implementing rules taking effect on March 23, 2026, continues to grant security forces expanded powers. These powers include the ability to detain, search, and investigate individuals, and to compel the disclosure of electronic device passwords, impacting residents, visitors, and those transiting through Hong Kong International Airport.

• International Travel Advisories and Concerns
  The US State Department and other Western governments continue to advise increased caution for travelers to Hong Kong. These advisories, updated following the expanded National Security Law enforcement powers on March 23, 2026, cite concerns over the arbitrary enforcement of local laws, risks of arbitrary detention, and unclear legal boundaries. Enhanced screening procedures for visitors from specific countries have been implemented at Hong Kong International Airport, and security presence remains heightened in areas like Central and Admiralty districts.

• Diplomatic Engagements Amidst US-China Tensions
  While the US Consul General in Hong Kong, Julie Eadeh, expressed optimism about US-China relations following a Xi-Trump summit in June 2026, broader diplomatic tensions persist. China lodged protests over the US State Department's 2026 report on Hong Kong, accusing Washington of a smear campaign and unwarranted interference in Hong Kong's internal affairs. The US continues to revoke elements of Hong Kong's special status under US law and policy due to Beijing's actions.

• EU-Hong Kong Climate Cooperation
  Hong Kong is actively deepening climate cooperation with European Union partners, as highlighted by the Greenway 2026 forum held on July 6, 2026. This fifth edition of the EU's flagship sustainability event in Hong Kong focused on "Driving Sustainability Through Innovation," bringing together over 300 figures to discuss technical standards, research collaboration, and regulatory alignment in climate action. This cooperation demonstrates an effort to maintain ties with the EU on non-political issues, despite broader EU-China trade imbalances and geopolitical complexities.

• Counter-terrorism Preparedness
  While no specific counter-terrorism incidents were reported during this period, Hong Kong maintains an elevated state of preparedness. The Inter-departmental Counter Terrorism Unit (ICTU), established in April 2018, continues to coordinate efforts among six disciplined services to enhance counter-terrorism capabilities. A large-scale inter-departmental counter-terrorism exercise was conducted in June 2026 at Hong Kong International Airport and Tung Chung in preparation for major international conferences later in the year. Additionally, a joint counter-terrorism exercise, "STEALTHNET," with Interpol and regional forces, concluded in April 2026, simulating cross-border cyber and physical attacks against critical infrastructure.

Geopolitical Impact and Regional Dynamics

Hong Kong's security developments during this period are deeply intertwined with broader geopolitical shifts, particularly the intensifying competition between major powers. The continued enforcement and expansion of national security laws by Beijing and the Hong Kong government, as highlighted by the Ministry of State Security's July 1, 2026 statement, solidify mainland China's control over the Special Administrative Region. This has led to sustained criticism from Western nations, notably the United States, which maintains travel advisories and has revoked elements of Hong Kong's special status, viewing these laws as undermining the city's autonomy and civil liberties. Such diplomatic friction underscores the ongoing ideological divide and the challenges Hong Kong faces in maintaining its "one country, two systems" framework.

The PLA Navy's port call, featuring guided-missile destroyer Nanning and frigate Hengyang, serves as a clear demonstration of China's military presence and sovereignty in Hong Kong. While presented as a patriotic and cultural exchange event, it also projects China's growing naval power in a strategically significant region. This military diplomacy reinforces Beijing's narrative of stability and national development for Hong Kong, contrasting with Western concerns about the erosion of freedoms. The event also aligns with China's broader strategy of integrating Hong Kong more deeply into national development plans, such as the Guangdong-Hong Kong-Macao Greater Bay Area and the Northern Metropolis, aiming to enhance the city's economic resilience and strategic value within the mainland's orbit.

Despite these tensions, Hong Kong actively seeks to maintain and deepen cooperation with international partners on non-political fronts. The Greenway 2026 forum, focusing on climate cooperation with the EU, exemplifies Hong Kong's efforts to position itself as a "superconnector" that facilitates technical standards, research collaboration, and regulatory alignment. This pragmatic approach aims to leverage Hong Kong's unique position as a global hub, even as broader EU-China trade relations face challenges and accusations of "unfair trade practices." The city's ability to navigate these complex dynamics, fostering economic ties while managing geopolitical pressures, will be crucial for its future stability and international standing.

Military and Defense Analysis

Hong Kong, as a Special Administrative Region of China, does not possess an independent military force; its defense is the responsibility of the Chinese People's Liberation Army (PLA) Hong Kong Garrison. The recent five-day port call by the PLA Navy fleet, including the guided-missile destroyer Nanning and guided-missile frigate Hengyang, from July 2 to July 6, 2026, served as a prominent display of China's modern naval capabilities and its sovereign presence in the city. The Nanning, a Type 052D guided-missile destroyer, is a domestically designed and built vessel, showcasing China's advancements in national defense and military modernization. These public engagements, held at the PLA Hong Kong Garrison's naval base on Stonecutters Island, are designed to foster patriotism and provide residents with a direct understanding of the nation's military strength.

While the PLA Garrison handles external defense, Hong Kong's internal security and counter-terrorism capabilities are managed by the Hong Kong Police Force (HKPF) and its inter-departmental units. The Inter-departmental Counter Terrorism Unit (ICTU), established in April 2018, coordinates efforts across six disciplined services to continuously enhance counter-terrorism preparedness. Recent exercises, such as the large-scale inter-departmental counter-terrorism drill at Hong Kong International Airport and Tung Chung in June 2026, and the "STEALTHNET" joint exercise with Interpol and regional forces in April 2026, demonstrate a focus on readiness against hybrid terrorist threats, including cyber and physical attacks on critical infrastructure. These exercises highlight Hong Kong's commitment to maintaining robust internal security mechanisms, particularly in anticipation of major international conferences.

Outlook and Forecast

In the short term (1-3 months), Hong Kong is likely to see continued emphasis on cybersecurity enhancements, particularly in the financial sector, following the SFC's directive to ban OTP logins for crypto platforms. This will drive a push towards more sophisticated authentication methods and increased vigilance against phishing and AI-driven cyber threats. Simultaneously, the enforcement of national security laws will remain a prominent feature of the security landscape, with authorities continuing to utilize expanded powers under the Safeguarding National Security Ordinance. This will likely sustain international scrutiny and travel advisories from Western nations, impacting perceptions of Hong Kong's legal and political environment.

Critical flashpoints and risk areas include the potential for further international diplomatic friction over human rights and civil liberties, especially as the implications of the national security laws continue to unfold. The ever-evolving nature of cyber threats, particularly from sophisticated phishing campaigns and emerging AI-related attacks, poses a constant risk to Hong Kong's digital infrastructure and financial stability. Furthermore, the balancing act between deeper integration with mainland China and maintaining Hong Kong's distinct international identity could become a flashpoint, influencing economic policies and foreign relations.

Indicators to monitor include the effectiveness and implementation rate of the new cybersecurity regulations, particularly the adoption of phishing-resistant authentication methods by financial institutions. Observing international reactions and statements regarding Hong Kong's legal framework, especially from the US and EU, will provide insight into the city's diplomatic standing. Domestically, public sentiment and any organized responses to security measures will be important to track. Economically, the success of Hong Kong's first comprehensive five-year development plan in attracting international talent and investment, while integrating with the Greater Bay Area, will be a key indicator of its long-term stability.

Strategic recommendations for Hong Kong include prioritizing proactive and adaptive cybersecurity strategies, investing in advanced threat intelligence, and fostering public-private partnerships to combat cybercrime. Diplomatically, Hong Kong should continue to seek avenues for cooperation on non-political global challenges, such as climate change, to maintain international engagement and demonstrate its value as a global hub. Internally, transparent communication regarding the implementation of security laws, alongside efforts to safeguard economic freedoms and judicial independence, could help mitigate international concerns and reinforce confidence in the "one country, two systems" framework.

Sources

• news.cn
• china.org.cn
• globaltimes.cn
• people.cn
• news.cn
• scmp.com
• globaltimes.cn
• rthk.hk
• cctv.com
• cryptonomist.ch
• beincrypto.com
• financemagnates.com
• theblock.co
• hkpc.org
• scmp.com
• chinadaily.com.cn
• travelwarningcheck.com
• state.gov
• state.gov
• striderintel.com
• travelandtourworld.com
• scmp.com
• ocmfa.gov.cn
• asianews.network
• chinadailyhk.com
• mfa.gov.cn
• chinadaily.com.cn
• ictu.gov.hk
• police.gov.hk
• news.gov.hk
• thestandard.com.hk
• info.gov.hk
• chinadailyhk.com
• gdfao.gov.cn
• chinadaily.com.cn