On June 2, 2025, the Hong Kong Police Force (HKPF) presented its inaugural yearly cybersecurity report, detailing significant insights into the cyber threats faced by the city. The Cyber Security and Technology Crime Bureau discovered that in 2024, it had received more than 440,000 intelligence pieces specifically about threats directed at Hong Kong, amidst handling a staggering 25 million pieces of potential cyber threat information throughout the year. This amounts to an average of over 68,000 intelligence alerts per day, highlighting the urgency for critical infrastructure operators to enhance their defenses.
The report, based on inspections of 90,000 assets belonging to critical infrastructure companies, revealed over 4,500 weaknesses, with 11 percent categorized as critical or high-risk vulnerabilities. Chief Superintendent Raymond Lam Cheuk-ho warned that if these vulnerabilities are not addressed, they could severely disrupt essential services in Hong Kong and affect residents' daily lives. In related data, the police noted nearly 34,000 technology-related crimes occurred last year, reflecting a minor 0.6 percent decrease compared to the previous year, yet involving significant financial losses of over HK$5.1 billion.
In the latest statistics for the first quarter of this year, the HKPF recorded a rise of 1.1 percent in technology-related crime cases, predominantly associated with online shopping, amounting to losses surpassing HK$1.43 billion. The report outlines the varied tactics employed by cybercriminals, including data theft through intrusions, exploiting supply chain weaknesses for large-scale breaches, and using artificial intelligence as a means to magnify the impact of attacks. The authorities advocates for continuous risk assessments of cyber assets essential to Hong Kong's infrastructure as a primary preventive strategy.
To mitigate these threats, cybersecurity experts have recommended the development of a robust defense strategy and the adoption of proactive security measures. Individuals and businesses are encouraged to reduce human error risks, secure systems, and prepare adequately for potential incidents. Additionally, following a recent evaluation of geopolitical risks, the police decided to opt for direct procurement from trusted service providers for their next-generation communication system, stressing the importance of maintaining vigilance against risks that could affect technology supply chains.
0 Comments