Hong Kong Security Report — April 26, 2026

Security analysis based on open-source intelligence and web research. Period: April 19 — April 26, 2026.

Executive Summary

Hong Kong's security landscape during April 19-26, 2026, was primarily shaped by heightened diplomatic tensions with the United States, robust internal security measures, and persistent cybersecurity challenges. The US State Department's "2026 Hong Kong Policy Act Report" drew strong condemnation from Beijing and Hong Kong authorities, underscoring the ongoing geopolitical friction over the city's autonomy and human rights. Internally, the Hong Kong Police Force (HKPF) demonstrated enhanced counter-terrorism capabilities through a multi-jurisdictional exercise, "STEALTHNET," simulating hybrid threats against critical infrastructure. Concurrently, a significant ransomware attack on a private club highlighted the pervasive nature of cyber threats, affecting over 9,000 individuals. The period also saw the PLA Hong Kong Garrison engaging in youth outreach and previously announced firing practices, alongside Hong Kong's continued efforts to align with China's national development plans and attract strategic enterprises.

Key Security Developments

• Diplomatic Condemnation of US "2026 Hong Kong Policy Act Report"
  On April 17, 2026, the Commissioner's Office of the Chinese Foreign Ministry in Hong Kong and the HKSAR government strongly condemned the US State Department's "2026 Hong Kong Policy Act Report," which was released on April 16. Both Beijing and Hong Kong authorities refuted the report's claims of eroding autonomy, democracy, and human rights, labeling it as politically biased interference in China's internal affairs and an attempt to "use Hong Kong to contain China". This incident highlights the deep and ongoing diplomatic rift between the US and China over Hong Kong's governance.

• Major Counter-Terrorism Joint Exercise "STEALTHNET"
  The Hong Kong Police Force (HKPF) successfully concluded the "Counter Cyber and Physical Terrorism Joint Exercise 2026," codenamed "STEALTHNET," on April 16, 2026. The exercise involved over 380 participants from various enforcement agencies, financial institutions, and international partners including Interpol, Macao Judiciary Police, Singapore Police Force, Cyber Security Agency of Singapore, and Korean National Police Agency. It simulated a cross-boundary terrorist cell launching cyber and physical attacks against financial, aviation, and healthcare systems across Hong Kong, Macao, Singapore, and Korea, demonstrating enhanced regional cooperation and preparedness against hybrid threats.

• Significant Ransomware Attack on Private Club
  On April 23, 2026, the Privacy Commission reported that a private club, Yau Yat Chuen Garden City Club, failed to adequately protect the personal data of over 9,000 members following a ransomware-related data breach. The attack, which occurred prior to the reporting period but was investigated and reported on during this time, rendered the club's customer management system inoperable and exposed personal details including names, identity card/passport numbers, dates of birth, and contact information. The breach was attributed to multiple security weaknesses, including outdated remote-access software and weak organizational security measures.

• PLA Hong Kong Garrison Engages Youth and Conducts Firing Practices
  On April 20, 2026, the Chinese PLA Hong Kong Garrison organized open day activities for nearly 2,000 Hong Kong teenagers, offering visits and military training programs to foster patriotism and understanding of China's national defense. This follows earlier announcements in March 2026 regarding scheduled military firing practices at the San Wai/Tai Ling Firing Range and the Tsing Shan Firing Range throughout April, with public safety warnings issued. These activities underscore the PLA's presence and its role in civic engagement and defense readiness in Hong Kong.

• Ongoing Implications of National Security Law Amendments
  While gazetted in March 2026, the amendments to Hong Kong's National Security Law continued to be a significant security development. These amendments empower police to demand passwords and decryption methods for electronic devices from individuals under national security investigation, with refusal carrying penalties of up to one year in jail and a HK$100,000 fine. Customs officers also gained powers to seize items with "seditious intention". These expanded powers have raised concerns about fundamental liberties and the reach of the national security framework.

• Hong Kong's Alignment with China's 15th Five-Year Plan
  Chief Executive John Lee announced on April 15, 2026, that the government would complete Hong Kong's first five-year plan this year, proactively aligning with China's 15th Five-Year Plan (2026-30). This strategic alignment aims to integrate Hong Kong into national development, focusing on areas like industrial modernization, technological self-reliance, and attracting talent, reinforcing the "one country, two systems" principle within a national security framework.

• Attraction of Strategic Enterprises for Economic Development
  On April 20 and 21, 2026, Hong Kong announced the attraction of 22 new strategic enterprises, including major pharmaceutical and technology firms, which are expected to bring in HK$73 billion in investment and create 25,000 high-value jobs. These enterprises span cutting-edge sectors such as AI, fintech, and advanced manufacturing, signaling Hong Kong's drive to strengthen its innovation ecosystem and reinforce its role as a "super connector" and "super value-adder" between mainland China and the global stage.

• Focus on AI Governance and Cybersecurity Preparedness
  The Hong Kong Global AI Governance Conference 2026 (HKGAGC 2026) was hosted by the University of Hong Kong on April 10-11, bringing together experts to discuss challenges in AI governance. Concurrently, the Hong Kong government is increasing investment in AI development, including establishing a dedicated AI R&D center and planning a data center cluster in Sha Ling to boost computing power. These initiatives, while aimed at economic growth, also highlight the increasing importance of securing AI infrastructure and data against evolving cyber threats.

• Cybersecurity Alerts and Training Initiatives
  Throughout the period, the Hong Kong Monetary Authority (HKMA) issued alerts regarding fraudulent websites, internet banking login screens, phishing emails, and other scams. Various cybersecurity challenges and competitions, such as the "HKCT × HKtag SHIELDtag Cybersecurity Challenge 2026" and "網絡攻防精英培訓暨攻防大賽 2026," were also ongoing or announced to enhance public and student awareness and skills in cybersecurity. These efforts reflect a continuous push to bolster the city's cyber defenses against a backdrop of increasing cyber incidents.

Geopolitical Impact and Regional Dynamics

Hong Kong's security developments during this period are deeply intertwined with broader geopolitical currents, particularly the intensifying rivalry between the United States and China. The release of the US State Department's "2026 Hong Kong Policy Act Report" on April 16, and the subsequent strong rebukes from Beijing and Hong Kong, underscore the city's position as a significant flashpoint in US-China relations. The US report, which criticizes the erosion of Hong Kong's autonomy and freedoms, reflects a continued Western narrative that challenges China's governance over the SAR. Conversely, China views these criticisms as blatant interference in its internal affairs, asserting Hong Kong's stability and prosperity under the national security laws. This diplomatic sparring contributes to an atmosphere of distrust and competition, impacting international perceptions of Hong Kong's business environment and rule of law.

Regionally, Hong Kong is actively seeking to solidify its role within China's strategic vision, particularly through its integration with the Guangdong-Hong Kong-Macao Greater Bay Area (GBA) and alignment with the 15th Five-Year Plan. The attraction of 22 new strategic enterprises, including those from the US, Europe, and Asia, demonstrates Hong Kong's efforts to maintain its international economic relevance despite geopolitical headwinds. However, the expanded reach of national security laws, including powers to demand electronic device passwords, raises concerns for foreign companies and individuals operating in the city, potentially affecting foreign investment and talent attraction in the long term.

The "STEALTHNET" counter-terrorism exercise, involving multiple regional police forces, highlights a pragmatic approach to security cooperation among Asian jurisdictions, including Macao, Singapore, and South Korea. This collaboration on hybrid threats, encompassing cyber and physical attacks, suggests a shared understanding of evolving security challenges in the region, independent of broader geopolitical tensions. However, the EU's continued focus on human rights in China and its conditions for an investment agreement, as discussed in February 2026, indicate that European diplomatic engagement with Hong Kong will likely remain cautious and tied to governance concerns, further complicating Hong Kong's efforts to balance its "super connector" role with Beijing's national security imperatives.

Military and Defense Analysis

Hong Kong's military and defense posture is primarily defined by the presence and activities of the Chinese People's Liberation Army (PLA) Hong Kong Garrison, as Hong Kong does not maintain its own independent military. During the reporting period, the PLA Garrison engaged in public outreach, hosting an open day for nearly 2,000 Hong Kong youth on April 20, 2026, to enhance their understanding of national defense and foster patriotism. This initiative serves a dual purpose of civic engagement and demonstrating the PLA's presence and role in the Special Administrative Region.

Furthermore, the PLA Garrison had previously announced military firing practices scheduled for April at the San Wai/Tai Ling Firing Range and the Tsing Shan Firing Range. These routine exercises are crucial for maintaining the operational readiness and combat capabilities of the troops stationed in Hong Kong, as highlighted by the mobilization ceremony for the 2026 training year in early January. While no specific details on defense spending or major acquisitions by the PLA Garrison were reported during this week, these activities indicate a consistent focus on training and readiness within the existing force posture.

The Hong Kong Police Force (HKPF) plays a critical role in internal security and counter-terrorism, and its capabilities were significantly tested and enhanced through the "STEALTHNET" joint exercise on April 16, 2026. This exercise, which simulated complex cyber and physical terrorist attacks, involved extensive coordination with regional and international law enforcement agencies, demonstrating a commitment to strengthening counter-terrorism capabilities and intelligence gathering. The HKPF's "Three-tier Prevention Framework" emphasizes intelligence gathering, public awareness, and multi-agency cooperation to deter and prevent terrorist activities, indicating a proactive and adaptive approach to internal security threats.

Outlook and Forecast

Short-term trends (1-3 months):
In the immediate future, Hong Kong is likely to experience continued diplomatic friction with Western powers, particularly the United States, following the recent US State Department report and Beijing's firm response. This will manifest in ongoing rhetoric and potentially further targeted sanctions or policy adjustments from the US, which China will likely counter with strong condemnations. Internally, the enforcement of the amended National Security Law, including the expanded powers for police to demand electronic device passwords, will remain a central feature of Hong Kong's security posture, potentially leading to further arrests and legal challenges. Cybersecurity threats, as evidenced by the recent ransomware attack and HKCERT's warnings, are expected to persist and intensify, particularly with the increasing adoption of AI technologies. Hong Kong will continue its efforts to attract strategic enterprises and integrate into China's national development plans, balancing economic growth with national security imperatives.

Critical flashpoints and risk areas:
Critical flashpoints include any further actions by the US or other Western governments that are perceived as undermining Hong Kong's autonomy, which could provoke strong reactions from Beijing and further escalate diplomatic tensions. The ongoing application of the National Security Law, particularly in cases involving foreign nationals or those with international connections, remains a significant risk area for human rights and international business confidence. The vulnerability of critical infrastructure to sophisticated cyberattacks, as simulated in the "STEALTHNET" exercise and highlighted by the ransomware incident, poses a constant threat to public services and the financial sector. Any significant social unrest or protests, however minor, could be met with a robust security response under the existing national security framework.

Indicators to monitor:
Key indicators to monitor include official statements and actions from the US, Chinese, and Hong Kong governments regarding the National Security Law and human rights. The frequency and severity of cybersecurity incidents, particularly those targeting critical infrastructure or government entities, will be crucial. Economic indicators related to foreign direct investment and the performance of the newly attracted strategic enterprises will reflect international confidence. Any changes in the PLA Hong Kong Garrison's activities beyond routine exercises, or shifts in regional security cooperation dynamics, would also warrant close attention. Public sentiment and any signs of organized dissent, even in subtle forms, should also be monitored.

Strategic recommendations:
For Hong Kong, strategic recommendations include continuing to strengthen its cybersecurity defenses through investment in advanced technologies, public-private partnerships, and international collaboration to mitigate the growing threat landscape. While upholding national security, the government should strive for greater transparency and clarity in the application of the National Security Law to alleviate concerns among the international business community and foreign residents. Diplomatic channels with Western powers should be maintained to manage tensions and prevent further escalation. Economically, Hong Kong should continue to diversify its strategic enterprise attraction efforts, focusing on sectors that align with both national development goals and global innovation trends, while ensuring a robust regulatory environment that protects data and intellectual property. Regionally, fostering continued cooperation on counter-terrorism and cybersecurity with neighboring jurisdictions will be vital for collective security.

Sources

• ocmfa.gov.cn
• china-embassy.gov.cn
• bignewsnetwork.com
• chinadailyhk.com
• usconsulate.gov
• chinadailyhk.com
• info.gov.hk
• news.gov.hk
• rthk.hk
• mod.gov.cn
• bastillepost.com
• info.gov.hk
• theguardian.com
• thestandard.com.hk
• visiontimes.com
• striderintel.com
• youtube.com
• chinadailyhk.com
• thestandard.com.hk
• news.gov.hk
• caixinglobal.com
• info.gov.hk
• eurekalert.org
• hkbu.edu.hk
• cybersecurity.hk
• infosec.gov.hk
• vir.com.vn
• chinadailyhk.com
• tbsnews.net
• china-briefing.com
• europa.eu
• chinamil.com.cn
• youtube.com
• police.gov.hk
• visiontimes.com