Hong Kong Security Report — April 25, 2026

Security analysis based on open-source intelligence and web research. Period: April 18 — April 25, 2026.

Executive Summary

During the period of April 18 to April 25, 2026, Hong Kong's security landscape was primarily shaped by intensified national security enforcement, proactive counter-terrorism measures, and ongoing diplomatic tensions with the United States. The Hong Kong Police Force (HKPF) conducted a significant multi-jurisdictional counter-terrorism exercise, "STEALTHNET," demonstrating a focus on hybrid threats and regional cooperation. Concurrently, the implementation of expanded powers under the National Security Law, allowing for electronic device access and seizure of "seditious" materials, drew strong condemnation from the US, which was vehemently rejected by Beijing and the HKSAR government. Cybersecurity threats remained a critical concern, with a notable increase in incidents in 2025 and warnings about new AI-driven attacks and scams. Geopolitically, Hong Kong positioned itself as a stable financial haven amidst global uncertainties, particularly in the context of Middle East tensions.

Key Security Developments

• Counter-Cyber and Physical Terrorism Joint Exercise "STEALTHNET"
  On April 16, 2026, the Hong Kong Police Force (HKPF), in collaboration with Interpol and police forces from Macao, Singapore, and South Korea, conducted a large-scale counter-terrorism exercise codenamed "STEALTHNET." The drill, involving over 380 participants from various sectors including financial institutions, simulated terrorist financing scenarios followed by cyber and physical attacks against critical infrastructure across Hong Kong, Macao, Singapore, and South Korea. This exercise underscored Hong Kong's commitment to enhancing preparedness against hybrid terrorist threats and strengthening regional counter-terrorism cooperation.

• Adoption of New Counter-Terrorism Weaponry
  The Hong Kong Police Counter Terrorism Response Unit officially adopted the Chinese domestically produced CS/LS7 submachine gun (export version of the QCQ-171). This new weapon made its first public appearance during a large-scale cross-departmental counter-terrorism exercise, codenamed "Anqiao," on April 19, 2026. This acquisition signifies a continued modernization of the HKPF's capabilities, with a focus on internal security and counter-terrorism operations.

• Expanded Powers Under National Security Law Implementation Rules
  Amendments to the Implementation Rules for Article 43 of the National Security Law, gazetted on March 23, 2026, and effective from April 17, 2026, significantly expanded the powers of law enforcement. These amendments allow police officers to demand passwords and decryption keys for electronic devices from individuals suspected of endangering national security, and to seize items deemed to have "seditious intention" even without an arrest. Refusal to comply can lead to imprisonment and substantial fines.

• US State Department's 2026 Hong Kong Policy Act Report
  On April 16, 2026, the US State Department released its "2026 Hong Kong Policy Act Report," which criticized Beijing and Hong Kong authorities for systematically degrading the city's political autonomy, rights, and freedoms through the National Security Law (NSL) and the 2024 Safeguarding National Security Ordinance (SNSO). The report also noted the extraterritorial application of these laws and transnational repression.

• China and HKSAR Government Condemn US Report
  In response to the US report, both the Office of the Commissioner of the Ministry of Foreign Affairs in Hong Kong (April 17, 2026) and the HKSAR Government (April 17, 2026) issued strong condemnations and rejections. China's Foreign Ministry spokesman Guo Jiakun reiterated Beijing's stance on April 21 and 22, 2026, stating that Hong Kong affairs are purely China's internal affairs and accusing the US of unwarranted interference and a smear campaign.

• Elevated Cybersecurity Threats and Government Initiatives
  The "Hong Kong Cybersecurity Outlook 2026" report, released earlier in the year, highlighted a record high of 15,877 cybersecurity incidents in Hong Kong in 2025, a 27% year-on-year increase. Top concerns for 2026 include AI-related attacks and supply chain vulnerabilities. The Digital Policy Office is establishing a risk-based, flexible governance framework for AI and strengthening cybersecurity, including providing free risk assessments for SMEs. GovCERT.HK also issued multiple security alerts during the reporting period.

• New Scam Type Involving QR Codes
  On April 18, 2026, Hong Kong police warned the public about a new type of scam where residents received suspicious government mail containing QR codes. Scanning these codes could lead to the installation of malware on devices or the leakage of sensitive personal and financial data.

• Operations Against Illegal Employment
  From April 17 to 23, 2026, the Immigration Department, in a coordinated effort with the Hong Kong Police Force, conducted a week-long series of territory-wide raids against illegal employment. These operations, codenamed "Twilight," "Champion," and "Rainbow," resulted in the arrest of 12 suspected illegal workers, two employers, and two alleged aiders and abettors.

• Crackdown on Illicit Fuel Activities
  On April 25, 2026, the Commissioner of Customs and Excise, Chan Tsz-tat, reported that his department, in joint operations with the Fire Services Department and the police, carried out 18 raids on illegal fueling stations and illicit fuel transfers in the first three months of 2026. These operations led to the arrest of 14 people and the seizure of 8 vehicles. Authorities are considering tougher penalties for those purchasing illegal fuel.

• Hong Kong as a "Safe Haven" Amidst Global Turmoil
  Reports from April 18-20, 2026, indicated that Hong Kong is emerging as a potential beneficiary for safe-haven assets, including gold, property, and capital, amidst global energy and financial market swings caused by the US-Israeli war on Iran. The city's pegged exchange rate, free capital flows, and support from mainland China are cited as factors boosting its appeal.

• Maritime Activity in Strait of Hormuz
  On April 19, 2026, a Hong Kong-flagged general cargo vessel was observed transiting the Strait of Hormuz via the Northern Corridor. This occurred amidst a significant drop in overall transit activity through the Strait, which remained highly unstable following a sharp deterioration on April 18, 2026, due to heightened risks from the US-Israeli war on Iran.

Geopolitical Impact and Regional Dynamics

The reporting period highlighted the persistent and deepening geopolitical fault lines impacting Hong Kong, primarily driven by the ongoing US-China rivalry. The release of the US State Department's "2026 Hong Kong Policy Act Report" on April 16, 2026, served as a direct challenge to Beijing's narrative of stability and prosperity under the national security framework. The report's accusations of eroding autonomy and human rights were met with strong condemnation from both the HKSAR government and mainland China, who reiterated that Hong Kong affairs are internal matters and accused the US of interference. This diplomatic exchange underscores the entrenched positions of both powers and suggests a continued trajectory of mutual criticism and potential retaliatory measures, such as sanctions or counter-sanctions, impacting Hong Kong's international standing.

Regionally, Hong Kong demonstrated its commitment to counter-terrorism cooperation through the "STEALTHNET" exercise, involving police forces from Macao, Singapore, and South Korea. This collaboration on hybrid threats, encompassing cyber and physical attacks on critical infrastructure, indicates a shared understanding among these Asian jurisdictions regarding evolving security challenges. Such exercises can foster stronger security ties within the region, potentially creating a counter-balance to external pressures and enhancing collective resilience against transnational threats.

Furthermore, the broader strategic landscape is being influenced by global events, particularly the US-Israeli war on Iran. Amidst the resulting volatility in energy and financial markets, Hong Kong is being perceived as a "safe haven" for capital and investments. This perception, bolstered by its pegged exchange rate, free capital flows, and strong backing from mainland China, could enhance Hong Kong's economic resilience and reinforce its role as an international financial center, even as its political autonomy is increasingly questioned by Western powers. However, the transit of a Hong Kong-flagged vessel through the volatile Strait of Hormuz also highlights the city's exposure to broader maritime security risks stemming from global conflicts.

Military and Defense Analysis

Hong Kong's defense posture, as observed during this period, remains heavily focused on internal security and law enforcement capabilities rather than traditional military defense. The adoption of the Chinese-produced CS/LS7 submachine gun by the Counter Terrorism Response Unit, publicly showcased on April 19, 2026, during the "Anqiao" exercise, indicates a continued trend of modernizing the HKPF's equipment. This acquisition reflects a strategic alignment with mainland China's defense industry and a commitment to equipping specialized police units with advanced, domestically sourced weaponry to address internal security threats.

The large-scale "STEALTHNET" counter-terrorism exercise, conducted on April 16, 2026, further illustrates the emphasis on hybrid threat response. The simulation of cyber and physical attacks on critical infrastructure, involving both law enforcement and civilian entities, demonstrates a comprehensive approach to safeguarding the city's vital systems. While the People's Liberation Army (PLA) Hong Kong Garrison commenced its 2026 training year in early January to enhance combat capabilities and defense responsibilities, the visible security activities within the reporting period were predominantly led by the HKPF, highlighting its primary role in maintaining order and addressing security challenges within the Special Administrative Region. Defense spending trends are not explicitly detailed in the provided information for this specific period, but the continuous enhancement of police capabilities suggests sustained investment in internal security.

Outlook and Forecast

Short-term trends (1-3 months): In the immediate future, Hong Kong is likely to experience continued heightened enforcement of national security legislation. The recent amendments to Article 43 of the National Security Law, which came into effect on April 17, 2026, granting expanded powers to demand electronic device access and seize "seditious" materials, will likely be tested and applied in upcoming cases. This will lead to further scrutiny from international bodies and Western governments. Diplomatic tensions between Hong Kong/Beijing and the US are expected to persist, with ongoing exchanges of criticism regarding human rights and autonomy. Cybersecurity will remain a top priority, with the government continuing to implement measures to counter the rising tide of AI-driven attacks and digital fraud.

Critical flashpoints and risk areas: A primary flashpoint remains the application and interpretation of the National Security Law and the Safeguarding National Security Ordinance. Any high-profile arrests or prosecutions under these expanded powers, particularly involving foreign nationals or individuals with international ties, could trigger significant international backlash and further sanctions. The cyber domain presents a persistent risk, with the potential for sophisticated AI-powered attacks to disrupt critical infrastructure or compromise sensitive data, despite government efforts. While not directly observed in this period, any resurgence of public dissent or protest could be met with swift and firm enforcement under the stringent security laws, potentially leading to social unrest.

Indicators to monitor: Key indicators to monitor include the number and nature of arrests and prosecutions under the amended national security laws, particularly those related to "seditious intention" or "external interference." The frequency and sophistication of cybersecurity incidents and the effectiveness of government and private sector responses will also be crucial. Statements and actions from major international actors, especially the US, EU, and UN, regarding Hong Kong's autonomy and human rights will indicate the level of international pressure. Additionally, monitoring economic indicators and capital flows will show whether Hong Kong's "safe haven" status is sustained amidst global geopolitical instability.

Strategic recommendations: For businesses and individuals operating in Hong Kong, it is recommended to conduct thorough due diligence on legal and compliance risks associated with the expanded national security laws, particularly concerning data privacy and electronic device access. Strengthening cybersecurity defenses and employee training on digital hygiene is paramount, given the elevated threat landscape and new scam types. Companies should also assess their supply chain vulnerabilities to cyberattacks. From a diplomatic perspective, international actors should continue to advocate for the protection of fundamental freedoms in Hong Kong while engaging in dialogue with Beijing to de-escalate tensions and promote transparency in legal processes.

Sources

• chinadailyhk.com
• info.gov.hk
• news.gov.hk
• reddit.com
• mayerbrown.com
• theguardian.com
• asianews.network
• info.gov.hk
• info.gov.hk
• news.gov.hk
• state.gov
• ocmfa.gov.cn
• asianews.network
• china-embassy.gov.cn
• chinadaily.com.cn
• chinadailyhk.com
• digitalpolicy.gov.hk
• hkcert.org
• asianews.network
• govcert.gov.hk
• youtube.com
• thestandard.com.hk
• rthk.hk
• scmp.com
• windward.ai
• mod.gov.cn