Hong Kong Security Report — July 25, 2026

Security analysis based on open-source intelligence and web research. Period: July 18 — July 25, 2026.

Security Analysis Report: Hong Kong (July 18-25, 2026)

Executive Summary

During the period of July 18-25, 2026, Hong Kong experienced a complex security landscape marked by significant diplomatic shifts, continued enforcement of national security legislation, and escalating cybersecurity threats. The United States partially eased sanctions on Hong Kong by allowing a 2020 national emergency executive order to expire, a move welcomed by Beijing as a positive step for bilateral relations, though key trade restrictions remain. Internally, authorities continued their crackdown on perceived dissent, with further arrests under the Safeguarding National Security Ordinance related to "seditious publications." Concurrently, the city's financial sector faced a heightened and evolving cybersecurity threat environment, including a notable cyberattack on a listed company and concerns over the geopolitical implications of AI technology access.

Key Security Developments

• Diplomatic Relations: US Partially Eases Hong Kong Sanctions
  On July 17, 2026, the United States announced it would not extend the national emergency declared in 2020 concerning Hong Kong, allowing Executive Order 13936 to expire. This decision led to the removal of sanctions against nine individuals, primarily Chinese and Hong Kong police and security officials. However, the US State Department clarified that the executive order revoking Hong Kong's special trading status, which treats the city the same as mainland China for tariffs and export controls, remains in effect, with 39 of 48 originally sanctioned individuals still facing restrictions under other acts. China's Ministry of Commerce and the Hong Kong Special Administrative Region (HKSAR) Government welcomed the move, viewing it as a positive step towards implementing consensus reached during recent economic and trade talks and fostering more constructive US-China relations.

• Security Incidents and Threats: National Security Law Enforcement Targets Bookstores
  On July 15, 2026, Hong Kong's National Security Department (NSD) arrested five individuals, including two freelance journalists and booksellers, in Mong Kok. The arrests followed raids on two independent bookstores, Have A Nice Stay and Greenfield Book Store, on suspicion of "doing an act that has a seditious intention" under Section 24 of the Safeguarding National Security Ordinance. Police investigations indicated the suspects allegedly displayed and sold publications inciting hatred against the HKSAR Government, the judiciary, and law enforcement agencies. This operation was initiated after the Customs and Excise Department intercepted an overseas shipment containing books deemed to have seditious intent. This marks the third round of arrests targeting independent bookstores, highlighting the ongoing crackdown on dissent and freedom of expression in the city.

• Cybersecurity: AI-Driven Threats and Financial Sector Attack
  The Hong Kong Securities and Futures Commission (SFC) issued Circular 26EC32 on June 2, 2026, warning licensed corporations about the rapidly evolving cybersecurity threat landscape, particularly from AI-enabled cyberattacks. The circular stressed the need for fundamental architectural changes rather than incremental patching, as AI enables faster reconnaissance, vulnerability identification, social engineering, and exploitation. Echoing this, the Hong Kong Monetary Authority (HKMA) also issued a circular in June 2026 on strengthening cyber resilience, aligning with the Protection of Critical Infrastructures (Computer Systems) Ordinance (PCICSO) which came into force in January 2026.
  A concrete incident occurred on July 19, 2026, when Hong Kong-listed Get Nice Holdings was hit by a cyberattack, temporarily disrupting its electronic trading systems and other services, including stock withdrawals. While its securities unit resumed operations, the futures unit remained affected. A report on July 24, 2026, indicated that cyber incidents in Hong Kong reached a record 15,877 in 2025, a 27% year-on-year increase, with financial losses from cybercrime hitting HK$3.04 billion in the first half of 2025 alone.

• Geopolitical Impact on Cybersecurity: AI Access Restrictions
  The geopolitics of AI directly impacted Hong Kong's financial sector during this period. On July 24, 2026, it was reported that two major international banks in Hong Kong had Anthropic's Claude, a generative AI tool, removed from internal systems for their Hong Kong-based teams. This move was attributed to a US export control directive requiring the suspension of foreign nationals' access to Anthropic's newest models, specifically impacting "Greater China." This incident underscores how AI is increasingly treated as a strategic asset, with geopolitical tensions directly influencing technological access and potentially weakening Hong Kong's position as a global financial hub.

• Diplomatic Relations: China Retaliates Against EU Sanctions
  On July 24, 2026, China's Ministry of Commerce announced it had added 14 European Union entities to its export control list. This action was a direct retaliation against a new round of EU sanctions, announced on July 23, 2026, which targeted 14 companies from mainland China and Hong Kong over their alleged support for Russia's defense industrial base. The Chinese measure prohibits the export of dual-use items from China to the named EU entities and bars foreign companies from providing China-origin dual-use items to them. This development highlights Hong Kong's entanglement in broader geopolitical conflicts and the increasing weaponization of trade and technology.

• Defense Policy and Strategic Shifts: Retroactive Application of National Security Procedures
  While enacted prior to this reporting period, subsidiary legislation under Hong Kong's domestic national security law, the Safeguarding National Security Ordinance (Article 23 legislation), came into effect in June 2026. This new legislation allows certain criminal cases to be retroactively brought under national security procedures, even if the alleged offenses occurred before the 2020 National Security Law was enacted. This significantly broadens the scope of national security enforcement, subjecting such cases to stricter bail conditions, longer detention periods, and trials by designated judges.

• Military Activities and Exercises: Recent PLA Naval Visit
  Although occurring just outside the reporting period (July 2-6, 2026), a People's Liberation Army (PLA) naval task group, comprising the guided-missile destroyer Nanning and guided-missile frigate Hengyang, visited Hong Kong. The visit included open-house events and cultural exchange activities for Hong Kong and Macao residents. This event served as a public demonstration of China's sovereignty and military presence in the Special Administrative Region, aiming to foster a deeper understanding of national defense development among the local populace.

Geopolitical Impact and Regional Dynamics

Hong Kong's security developments during this period underscore its continued position at the nexus of major power competition and regional dynamics. The partial easing of US sanctions, while limited in scope, represents a nuanced shift in US-China relations, potentially signaling a desire by the Trump administration to de-escalate tensions ahead of an anticipated visit by President Xi Jinping to Washington in September. China's positive reception of this move suggests a reciprocal interest in stabilizing economic and trade ties. However, the retention of Hong Kong's revoked special trading status and the ongoing sanctions against numerous individuals indicate that fundamental disagreements over Hong Kong's autonomy and human rights persist, preventing a full normalization of relations. This delicate balance means Hong Kong remains a sensitive point in the broader US-China strategic rivalry.

The city's entanglement in the EU-China dynamic further illustrates its vulnerability to global geopolitical currents. The EU's decision to sanction Hong Kong firms for alleged support of Russia, followed by China's swift retaliation with its own export controls, demonstrates how conflicts far removed from Hong Kong's immediate vicinity can directly impact its economic and trade environment. This tit-for-tat escalation highlights the increasing pressure on Hong Kong to align with Beijing's foreign policy stances, even at the cost of its international economic relationships. The targeting of dual-use items in these sanctions also points to the growing strategic importance of technology and supply chains in geopolitical competition, a trend further emphasized by the restrictions on AI tool access for Hong Kong's financial sector.

The "geopolitics of AI" is emerging as a critical factor shaping Hong Kong's future, particularly its role as a global financial hub. The reported removal of advanced AI tools from Hong Kong-based teams in international banks due to US export controls on "Greater China" signifies a direct impact of technological decoupling. This development could hinder Hong Kong's competitiveness if its access to cutting-edge technologies is restricted compared to other financial centers. The continued tightening of national security laws, including the retroactive application of security procedures, further erodes the city's once-distinct legal and political autonomy, reinforcing Beijing's control and potentially impacting international confidence in Hong Kong's "one country, two systems" framework.

Military and Defense Analysis

Hong Kong's defense and military posture are intrinsically linked to mainland China's People's Liberation Army (PLA). The recent PLA naval visit, involving the guided-missile destroyer Nanning and frigate Hengyang from July 2-6, 2026, served primarily as a public diplomacy and sovereignty assertion exercise rather than a direct military operation. These open-house events aim to integrate Hong Kong residents with the national defense narrative and showcase the modernization of the PLA Navy. While no new defense acquisitions or significant strategic shifts by Hong Kong itself were reported, the presence of advanced PLA naval assets underscores China's capability to project power and maintain security in the region, including within Hong Kong's waters.

The broader context of China's defense spending and modernization programs directly influences Hong Kong's security environment. While Hong Kong does not maintain its own independent military, the PLA Garrison in Hong Kong is a permanent fixture, symbolizing Beijing's ultimate authority. The ongoing emphasis on national security legislation and its robust enforcement by local authorities, backed by Beijing, can be seen as a form of internal defense strategy against perceived threats to national sovereignty and stability. The retroactive application of national security procedures further solidifies this internal security framework, allowing for a more comprehensive and enduring crackdown on activities deemed subversive. This approach prioritizes political stability and control over traditional military defense against external threats, reflecting the unique "one country, two systems" framework under increasing pressure.

Outlook and Forecast

Short-term trends (1-3 months):
Hong Kong is likely to experience continued robust enforcement of its national security laws, with further arrests or investigations targeting individuals or organizations perceived as undermining national security. The cybersecurity threat landscape will remain elevated, particularly with the proliferation of AI-enabled attacks, necessitating increased vigilance and investment in resilience measures by both government and private sectors. Diplomatic maneuvering between the US, EU, and China regarding Hong Kong will persist, with any further sanctions or retaliatory measures having immediate implications for the city's economic and political environment.

Critical flashpoints and risk areas:
Critical flashpoints include any further high-profile arrests under national security legislation, especially those involving foreign nationals or prominent figures, which could trigger renewed international condemnation and diplomatic fallout. The ongoing US-China and EU-China tensions, particularly concerning trade, technology, and the Russia-Ukraine conflict, pose a significant risk, as Hong Kong could become a pawn in broader geopolitical disputes, leading to further economic restrictions or technological decoupling. Major cyberattacks targeting critical infrastructure or financial institutions could also destabilize the city's economy and international standing.

Indicators to monitor:
Key indicators to monitor include the frequency and nature of arrests under the national security laws, particularly the scope of "seditious intent" and "foreign collusion" interpretations. Observe statements and actions from the US and EU regarding Hong Kong's autonomy, human rights, and any new sanctions or trade policies. Track reports of cybersecurity incidents, especially those involving AI, and the implementation of new cybersecurity regulations. Monitor China's economic and diplomatic responses to international pressure concerning Hong Kong, as well as any changes in the PLA's activities or public engagement in the city.

Strategic recommendations:
For businesses operating in Hong Kong, it is crucial to significantly enhance cybersecurity defenses, particularly against sophisticated AI-driven threats, and to ensure compliance with evolving local and national security-related data regulations. Companies should also assess their supply chain vulnerabilities and potential impacts from geopolitical tech decoupling. For international governments, a balanced diplomatic approach is recommended, combining engagement with China on areas of mutual interest while consistently advocating for the preservation of Hong Kong's autonomy and fundamental freedoms. For Hong Kong authorities, navigating the complex geopolitical landscape will require careful consideration of the long-term economic and social implications of national security enforcement and its impact on the city's international appeal.

Sources

• japantimes.co.jp
• briefs.co
• washingtonpost.com
• chinadaily.com.cn
• aa.com.tr
• indopremier.com
• apnews.com
• info.gov.hk
• globaltimes.cn
• chinadaily.com.cn
• tvb.com
• steptoe.com
• news.gov.hk
• youtube.com
• news.gov.hk
• cpj.org
• theguardian.com
• securityboulevard.com
• kpmg.com
• thestandard.com.hk
• sia-partners.com
• socradar.io
• scmp.com
• scmp.com
• washingtonpost.com
• globaltimes.cn
• scmp.com
• rthk.hk
• chinadaily.com.cn
• scmp.com
• mod.gov.cn
• globaltimes.cn
• substack.com