Hong Kong Security Report — September 23, 2026

Security analysis based on open-source intelligence and web research. Period: September 16 — September 23, 2026.

Executive Summary

Hong Kong's security landscape during the period of September 16-23, 2026, was marked by significant developments in cybersecurity, counter-terrorism preparedness, and ongoing diplomatic tensions related to its national security legislation. A major concern emerged with the reported diversion of F-35 fighter jet components to Hong Kong, prompting international investigations into potential espionage and technology acquisition. Domestically, the Hong Kong government unveiled its first Five-Year Plan, emphasizing economic integration with mainland China and reiterating the paramount importance of national security as a foundation for development. Concurrently, the European Parliament passed a resolution condemning Hong Kong's national security laws and calling for sanctions, further highlighting the city's strained diplomatic relations with Western powers.

Key Security Developments

• F-35 Components Diverted to Hong Kong. On September 18, 2026, reports indicated that a shipment of F-35 fighter jet components, including advanced stealth technology, was unexpectedly diverted to Hong Kong while in transit from Australia to the United States. This incident has triggered investigations by US and Australian authorities due to concerns that the People's Republic of China (PRC) could gain access to classified military technology for reverse-engineering or to identify vulnerabilities in allied systems. The Pentagon's F-35 Joint Program Office confirmed awareness of the "shipment issue" and is working to retrieve the components and investigate the incident.

• EU Parliament Condemns National Security Laws and Calls for Sanctions. On September 19, 2026, the European Parliament adopted a resolution criticizing Hong Kong's National Security Law (NSL), in force since 2020, and the National Security Safeguarding Ordinance (NSSO), enacted in 2024. The resolution demanded their immediate repeal and urged the Council of the European Union to impose targeted sanctions on Hong Kong officials under the EU Global Human Rights Sanctions Regime. It cited over 400 arrests and more than 180 convictions since June 2026 under these laws, specifically condemning the arrest of bookseller Leticia Wong and the sentencing of activists Lee Cheuk-yan, Chow Hang-tung, Albert Ho, and media owner Jimmy Lai.

• HKSAR Government Rejects Foreign Interference. On September 17, 2026, the Hong Kong Special Administrative Region (HKSAR) Government strongly condemned politicians in the US Congressional-Executive Commission on China (CECC) for holding a "hearing" regarding the "Lai Chee-ying case" and making "false and smearing remarks," as well as introducing "sanctions." The HKSAR Government asserted its inherent right to enact national security laws and reaffirmed its commitment to fully implementing the NSL and NSSO.

• Annual EU Report Highlights Erosion of Freedoms. On September 22, 2026, the European Commission and the High Representative of the Union for Foreign Affairs released their annual report on Hong Kong, noting the "continuous erosion of Hong Kong's autonomy and of the fundamental freedoms and rights of the people" in 2025. The report attributed this to the Hong Kong government's "incessant focus on national security" and highlighted the expanded pursuit of activists abroad, including a European citizen residing in Germany.

• Hong Kong Bolsters Cyber Defenses Against AI Threats. On September 17, 2026, Hong Kong officials announced the establishment of an interdepartmental coordination mechanism and a joint artificial intelligence (AI) laboratory to counter the growing threat of AI-driven cyberattacks. This initiative addresses global concerns about the weaponization of AI to automate complex intrusions against critical infrastructure. The move aligns with the 2026 China Cybersecurity Week Hong Kong Sub-forum, which concluded on the same day, bringing together over 400 experts to discuss AI security and cyber defense.

• Major Counter-terrorism Drill Conducted at AsiaWorld-Expo. On September 22, 2026, over 300 personnel from various government departments and organizations participated in a joint counter-terrorism drill at AsiaWorld-Expo. The exercise simulated security threats and terrorist attacks during a mock summit, employing "iCasualty" software for real-time inter-departmental communication and casualty tracking. This drill was conducted in preparation for a significant international sports conference scheduled for later in the year.

• First Five-Year Plan Emphasizes National Security and Economic Alignment with China. On September 16, 2026, Chief Executive John Lee unveiled Hong Kong's inaugural Five-Year Plan for Economic and Social Development (2026-2030) and his fifth Policy Address. The plan explicitly states that "security is the prerequisite for development" and aims to align Hong Kong's economic and social strategy more closely with mainland China's development goals. Key initiatives include boosting investment in innovation and technology and developing the Northern Metropolis.

• Deepfake Fraud Incident Highlights Cybersecurity Vulnerabilities. A 2024 incident in Hong Kong was referenced on September 22, 2026, where a finance employee at a multinational firm's Hong Kong branch was defrauded of over $25 million after participating in a deepfake video call believed to include the company's CFO and colleagues. This event underscores the escalating threat of AI-powered social engineering and the need for enhanced verification protocols.

• Maritime Development Initiatives in Five-Year Plan. The newly announced Five-Year Plan includes measures to promote high value-added maritime services, revamp Hong Kong's ship registration regime, and explore synergies between financial and maritime services. The goal is to transform Hong Kong Port from a volume-based to a value-driven hub, solidifying its position as a "Global Maritime Capital."

• ASEAN-Hong Kong Investment Agreement Protocol Signed. On September 20, 2026, the First Protocol to Amend the Investment Agreement between ASEAN and Hong Kong was signed in Manila. This protocol aims to enhance the predictability and certainty of investment regimes, ensuring Hong Kong enterprises receive non-discriminatory treatment in ASEAN member states and fostering increased two-way investments.

Geopolitical Impact and Regional Dynamics

Hong Kong's security developments during this period underscore its increasingly complex geopolitical position, caught between Beijing's tightening control and Western concerns over human rights and autonomy. The European Parliament's resolution on September 19, 2026, calling for sanctions and a review of Hong Kong's WTO status, signifies a continued deterioration of diplomatic relations with the EU. This stance is reinforced by the European Commission's annual report on September 22, 2026, which explicitly highlights the "continuous erosion of Hong Kong's autonomy" due to the national security focus. Such actions by the EU, while non-binding, contribute to a narrative of international isolation for Hong Kong from Western democracies, potentially impacting its status as a global financial hub.

The reported diversion of F-35 components to Hong Kong on September 18, 2026, introduces a significant element of espionage and technology acquisition into the regional dynamic. If confirmed that the PRC gained access to advanced stealth technology, this could escalate tensions between China and major powers like the US and Australia, potentially leading to further restrictions on technology transfers and increased scrutiny of supply chains involving Hong Kong. This incident highlights Hong Kong's vulnerability as a transit point and its integration into China's broader strategic objectives, including military modernization.

Meanwhile, Hong Kong's First Five-Year Plan, unveiled on September 16, 2026, explicitly aims to align the city's economic and social development with mainland China's goals, with national security as a foundational principle. This strategic shift reinforces Beijing's narrative of "one country, two systems" evolving towards greater integration and control, further solidifying Hong Kong's role within China's national development strategy, particularly the Greater Bay Area. The signing of the ASEAN-Hong Kong investment protocol on September 20, 2026, indicates Hong Kong's efforts to strengthen economic ties within Asia, potentially seeking to offset strained relations with Western blocs.

Military and Defense Analysis

Hong Kong does not maintain an independent military force; its defense is the responsibility of the People's Liberation Army Hong Kong Garrison (PLA HK Garrison). The primary military activity noted during this period was the routine firing practice scheduled for September at the San Wai/Tai Ling Firing Range and the Tsing Shan Firing Range. This is a standard operational procedure for the PLA Garrison, indicating ongoing readiness and training within the Special Administrative Region.

The most significant defense-related development impacting Hong Kong's security posture, albeit indirectly, is the reported diversion of F-35 fighter jet components to Hong Kong on September 18, 2026. While not a direct military activity by Hong Kong or the PLA Garrison, this incident raises serious concerns about intelligence gathering and technology acquisition by the PRC. Access to such advanced stealth technology could significantly aid China's military modernization programs, potentially allowing for reverse-engineering or the identification of vulnerabilities in F-35 aircraft operated by the US and its allies. This event underscores the strategic importance of Hong Kong as a potential conduit or target for intelligence operations related to advanced defense technologies.

Domestically, the Hong Kong government's emphasis on cybersecurity enhancements through an interdepartmental coordination mechanism and a joint AI laboratory, announced on September 17, 2026, reflects a proactive approach to modern defense in the digital realm. This is crucial given the increasing sophistication of AI-driven cyberattacks and the cited deepfake fraud incident. While not traditional military defense, robust cybersecurity is a critical component of national security, protecting critical infrastructure and sensitive information, especially in a global financial hub like Hong Kong.

Outlook and Forecast

Short-term trends (1-3 months):
In the immediate future, Hong Kong is likely to experience continued diplomatic pressure from Western nations, particularly the EU, following the recent resolution and annual report condemning its national security laws. This could manifest in further calls for sanctions or reviews of Hong Kong's international standing. Domestically, the implementation of the First Five-Year Plan will proceed, with a strong emphasis on economic integration with mainland China and the Northern Metropolis development. Cybersecurity initiatives, including the new AI laboratory, will likely accelerate in response to evolving AI-driven threats and the high-profile F-35 component diversion incident. Counter-terrorism preparedness will remain a high priority, especially with upcoming international events, as evidenced by the recent drill at AsiaWorld-Expo.

Critical flashpoints and risk areas:
The primary flashpoint remains the enforcement of the National Security Law and the National Security Safeguarding Ordinance. Continued arrests and convictions of activists and media figures will exacerbate tensions with international bodies and Western governments. The F-35 component diversion is a critical risk area; if the components are not recovered or if evidence emerges of PRC exploitation, it could lead to significant geopolitical fallout, including potential retaliatory measures from the US and Australia, and increased scrutiny of Hong Kong's role in global supply chains. The increasing sophistication of AI-driven cyberattacks and deepfake fraud poses a persistent threat to Hong Kong's financial sector and critical infrastructure.

Indicators to monitor:
Key indicators to monitor include any further actions by the EU or other international bodies regarding sanctions or Hong Kong's trade status. The progress and outcomes of the investigations into the F-35 component diversion will be crucial. Domestically, observe the pace and scope of the Northern Metropolis development and other initiatives under the Five-Year Plan, particularly how they balance economic growth with national security imperatives. Monitor reports on cybersecurity incidents and the effectiveness of new defense mechanisms against AI threats. Any public statements or actions from Beijing regarding Hong Kong's international relations or national security enforcement will also be vital.

Strategic recommendations:
For international businesses and organizations operating in Hong Kong, it is recommended to conduct thorough due diligence on supply chain security, particularly for sensitive technologies, in light of the F-35 component diversion. Enhance cybersecurity protocols, especially against AI-driven social engineering and malware, and ensure compliance with evolving data security and privacy regulations in both Hong Kong and mainland China. Organizations should also be aware of the implications of the NSL and NSSO on freedom of expression and data handling. For diplomatic entities, continued engagement with Hong Kong authorities on human rights concerns, while maintaining open channels for dialogue, is advisable.

Sources

• understandingwar.org
• theaviationist.com
• jurist.org
• facebook.com
• europa.eu
• info.gov.hk
• informat.ro
• europa.eu
• caixinglobal.com
• info.gov.hk
• thestandard.com.hk
• nampa.org
• eqs-news.com
• bastillepost.com
• thestandard.com.hk
• businesstimes.com.sg
• newsfilecorp.com
• facebook.com
• scmp.com
• helpnetsecurity.com
• financialcontent.com
• facebook.com
• hongkongmaritimehub.com
• eqs-news.com
• info.gov.hk
• pna.gov.ph
• info.gov.hk
• iapp.org