top of page

8 July 2025

Cyber Security and Technology Crime Bureau CSTCB “Cybersecurity Report 2024”

Cyber Security and Technology Crime Bureau CSTCB “Cybersecurity Report 2024”

CSTCB will continue to lead the development of the cybersecurity ecosystem.


Key Cybersecurity Data

  • Among the 33,903 technology crime cases recorded by Hong Kong Police Force in 2024, there were 112 destructive cyberattacks, including 61 “Hacking activities”, 46 “Ransomware” and 5 “Distributed denial-of-service (DDoS) attacks” cases.

  • In 2024, CSTCB processed over 25 million pieces of cyber threat intelligence, averaging more than 68,000 pieces per day. Among these, CSTCB identified over 440,000 cyber threats targeting Hong Kong.

  • Analysis of cybersecurity incidents revealed three recurring issues: Inadequate access control and configuration, Outdated and unpatched systems, Lack of effective threat detection mechanisms

  • Over 90,000 Internet-facing assets of Hong Kong's critical infrastructures were assessed and that 5% had varying degrees of system vulnerabilities. Among the discovered vulnerabilities, 89% were classified as medium and low risk, and 11% were identified as critical and high risk.

Cyber Threat Forecast for the Coming Year

  • Surging AI-powered cyber threats and AI system risks

  • Ransomware attacks remain prevalent

  • Increasing Web3-related cyberattacks

  • Escalating IoT security risks

  • Growing supply chain and third-party risks

  • Intensifying cloud security and hybrid work risks

  • Emerging attacks on critical infrastructures

Copyright @2026 The University of Hong Kong. All Rights Reserved.
bottom of page