Police warn of critical infrastructure vulnerabilities after detecting 440k cyber threats in 2024

Hong Kong faced over 440,000 targeted cyber threats last year, police’s Cyber Security and Technology Crime Bureau revealed in their first cybersecurity report.

Hong Kong police have released annual figures showing a marginal decline in technology-related crimes, though financial losses remain alarmingly high.

Last year saw nearly 34,000 reported cases, representing a 0.6 percent decrease from 2023, with total losses exceeding HK$5.1 billion—a 6 percent reduction.

However, the first quarter of 2025 has already witnessed a slight uptick, with 7,680 cases logged, marking a 1 percent increase compared to the same period last year and involving roughly HK$1.4 billion in losses.

In its inaugural cybersecurity report, the Cyber Security and Technology Crime Bureau (CSTCB) disclosed handling more than 25 million cyber threat alerts in 2024—an average of 68,000 per day. Among these, 440,000 were specifically directed at Hong Kong's network.

Authorities conducted security assessments on over 90,000 network assets tied to essential services such as utilities, transport, and telecommunications. The probe uncovered that 5 percent of these systems contained security flaws, with 10 percent of the vulnerabilities deemed high or critical risks.

A CSTCB spokesman warned that unaddressed weaknesses could severely disrupt public services if exploited by malicious actors. He emphasized the urgent need for organizations to patch vulnerabilities and adopt stronger safeguards.

Police emphasized that cybersecurity experts recommend establishing comprehensive cybersecurity strategies and adopting proactive defense measures. Whether individuals or enterprises, all can enhance their cyber defense capabilities by eliminating human factor risks, ensuring system and device security, and preparing thorough contingency and remediation plans.

In a separate development, police announced the cancellation of a public tender for a next-generation communications system, citing heightened geopolitical risks and public interest considerations. Instead, authorities will pursue direct procurement to ensure the acquisition of a secure and reliable solution.

The spokesman noted that global tensions now pose significant risks to technology supply chains, advising both public and private sectors to exercise caution when selecting vendors.