Technology
Hong Kong Tech Firms Boost Cybersecurity as Phishing Attacks Shift to Messaging Apps
Hong Kong enterprises show growing vigilance even as reported incidents climb and delivery methods shift toward messaging apps.
How we reported this
Cybersecurity awareness in Hong Kong has risen to 48%, up from 36% a year prior, coinciding with a 6% increase in SME cyber-attack experiences to 30%. The shift appears in the local tech and startup scene where firms in Causeway Bay are responding to sustained pressure from online threats.
Local sector gathering highlights insider risks
A recent luncheon on insider threat culture was held in Causeway Bay at Crowne Plaza on May 20, 2026, bringing together finance, energy, and tech sectors to discuss security culture. Participants from these industries examined how internal practices affect overall resilience, a topic of direct interest to startups and established tech operators in the district.
The event comes as nearly 70% of Hong Kong enterprises now have dedicated cybersecurity personnel, reflecting heightened proactive awareness and investment in security measures. This staffing trend supports the broader increase in awareness levels and indicates that more companies are allocating resources to prevention rather than only responding after incidents occur.
Phishing remains leading threat amid new initiatives
Phishing attacks remain the dominant threat, accounting for 57% of the 15,877 cybersecurity incidents reported in 2025, with delivery methods expanding to WhatsApp and social media. The pattern shows how attackers continue to adapt channels while the volume of reported cases stays elevated.
The Digital Policy Office introduced new public awareness initiatives in June 2026, including phishing exercises for students and an AI-generated comic contest to teach protective measures. These programs target younger users and complement the enterprise-level steps already visible in Causeway Bay's tech community.
With awareness levels climbing and dedicated security roles becoming more common, local firms are positioned to apply lessons from the May gathering and the June initiatives. Continued focus on training and staffing offers a direct path to reducing exposure in the months ahead.