Blog
We collect recent Hong Kong IT incidents that matter to small and medium-sized enterprises — for example, when a system stops working, when customer data is leaked, or when malicious or ransomware software is involved — and we link to public reports or official statements, so readers can see what happened and what is worth paying attention to.
Police figures for the first three quarters of 2026: ransomware cases rose, and remote desktop and website flaws need patching
Overall technology crime in Hong Kong fell slightly from January to September 2026, but ransomware cases rose from 34 to 40. Police also reported a large number of high-risk weaknesses in remote desktop and PHP websites.
HKCERT: security incidents in the third quarter of 2026 rose about 15%, and phishing still made up about 60%
HKCERT recorded 4,404 security incidents in the third quarter of 2026, about 15% more than a year earlier. Phishing remained the largest category, and was seen more often on social media and instant messaging.
Patient data stolen in the Hospital Authority’s Kowloon East Cluster: access during contractor maintenance also needs tight control
The Hospital Authority accepted a Privacy Commissioner report on a suspected theft of patient data in the Kowloon East Cluster in April 2026. The incident involved how a contractor’s access was managed during maintenance of a peripheral clinical system.
Hong Kong Airlines, UoU and Broadway: after a data leak, customers received scam calls that used real order or flight details
In October 2026, the Privacy Commissioner received breach reports from Hong Kong Airlines, UoU Hong Kong and Broadway Photo Supply, affecting at least about 1,600 people. Some customers later received accurate scam calls. In the same period, HKEAA also reported a leak of international-exam applicant data.
PHP2Shell: in October 2026, PHP patched two critical flaws that can allow remote code execution
On 21 October 2026, the PHP project released a security update for two critical vulnerabilities known as PHP2Shell. An unauthenticated remote attacker may be able to run code on the server; PHP said that updating is the only safe approach.
HKCERT Outlook 2026: incidents hit a record in 2025, and nearly 30% of enterprises still have no dedicated cybersecurity staff
HKCERT recorded 15,877 cybersecurity incidents in 2025, a record and 27% higher than the year before, with phishing at 57%. A survey of 622 enterprises found that nearly 30% still had no dedicated cybersecurity staff, and that SMEs were more cautious than large firms in spending.
Please tell us about your current situation
Please call, use WhatsApp, or complete the enquiry form. We will review the situation and recommend a suitable course of action.