Cybersecurity Hong Kong Smart City: Risks, Trends and Digital Transformation

Author: Anna Lau, Litigation Partner

Cybersecurity in Smart City, such as Hong Kong, has become an increasingly important topic as digital transformation accelerates across society. While technological advancement brings efficiency and connectivity, it also introduces heightened risks to individuals, businesses, and public infrastructure.

“The wide adoption of information technology (“IT”) can bring convenience to the public and improve quality of living. At the same time, the risks of the public, enterprises and the community being hacked have increased correspondingly… For Hong Kong to become a secure smart city, the Government, different sectors of the community and the general public must have knowledge of cyber risks so as to become more vigilant and take appropriate measures to protect their information systems and data assets, with a view to continuously improving the defence and response capability of the society as a whole.” — Office of the Government Chief Information Officer (HK), circa January 2020

Whilst most people will remember 2020 as the year of lockdowns, it also marked a significant shift towards digital living. Social distancing measures drove individuals and businesses online, accelerating reliance on digital platforms and communication technologies.

While this transition represents progress, it has also underscored the risks inherent in increased digital exposure.

Cybersecurity Landscape of 2020

According to the Hong Kong Computer Emergency Response Team Coordination Centre, there was a notable increase in cyber incidents in 2020. Key threats included:

Botnet Attacks

Devices may be compromised and controlled remotely by cybercriminals to carry out illegal activities. This may result in unsuspecting users being linked to unlawful conduct.

Phishing Attacks

Phishing attacks increased significantly, where fraudulent emails or communications are used to obtain confidential information. This can lead to data breaches, reputational damage, and financial loss.

Malware Attacks

Malicious software such as ransomware and trojan programmes continued to evolve. In extreme cases, cyberattacks have impacted physical devices, demonstrating that digital threats may have real‑world consequences.

Defacement Attacks

These attacks involve unauthorised intrusion into systems and alteration of data or content. This may result in loss of original information and compromise of system integrity.

Cybersecurity Outlook and Emerging Risks

As technology continues to evolve, new risks emerge alongside opportunities.

5G Technology and Swarm Attacks

The deployment of 5G technology enables faster connectivity and greater integration of devices. However, it may also facilitate more sophisticated cyberattacks, including coordinated botnet activity involving multiple compromised devices.

API Vulnerabilities

Application Programming Interfaces (APIs) are increasingly used in connected devices and systems. Weak or exposed APIs may create vulnerabilities that can be exploited, potentially resulting in both digital and physical harm.

Remote Working and Learning Risks

The shift to remote environments has increased reliance on home networks and personal devices, which may lack adequate security measures. This creates additional entry points for cyber threats.

Insider Threats

With the growth of remote working arrangements, risks associated with internal access have increased. This includes both intentional and unintentional data breaches arising from inadequate controls or security practices.

Key Challenges for a Smart City

For Hong Kong to achieve its objective of becoming a secure smart city, several challenges must be addressed:

• integration of cybersecurity across all sectors

• improved digital literacy among users

• strengthening of system resilience and response mechanisms

Cybersecurity is no longer solely a technical issue but a shared responsibility across organisations and individuals.

Practical Steps for Cybersecurity

To mitigate risks, organisations and individuals should consider the following:

Secure All Networks

Both office and remote networks must be properly secured. Organisations should implement consistent cybersecurity standards across all environments.

Secure All Devices

Devices used for work or personal purposes should meet appropriate security standards, including regular updates and protection measures.

Educate All Users

Human error remains a significant factor in cybersecurity incidents. Ongoing education and awareness are essential to strengthen overall resilience.

Conclusion

The transition to a more digitally connected society presents both opportunities and risks. The development of Cybersecurity Hong Kong Smart City requires continuous effort in awareness, infrastructure, and governance.

As reliance on digital systems grows, cybersecurity must remain a priority to ensure stability, trust, and long‑term development.

How Ravenscroft & Schmierer Can Help?

Ravenscroft & Schmierer advises businesses on regulatory and risk considerations relating to digital operations and cybersecurity. The firm supports organisations in understanding legal implications relating to data protection, risk management, and compliance in Hong Kong’s evolving technological environment. Clients seeking further information may contact us.

FAQ: Cybersecurity Hong Kong Smart City

What is cybersecurity in the context of Hong Kong?

Cybersecurity refers to the protection of systems, networks, and data from digital attacks and unauthorised access.

Why did cybersecurity risks increase in 2020?

The shift towards remote working and increased online activity created more opportunities for cyberattacks.

What are the most common types of cyberattacks?

Common attacks include phishing, malware, botnet attacks, and system defacement.

What is a botnet attack?

A botnet attack involves the use of compromised devices controlled by cybercriminals to carry out malicious activities.

Why is cybersecurity important for a smart city?

Cybersecurity ensures the protection of digital infrastructure and supports safe and reliable use of technology in daily life.

How can Ravenscroft & Schmierer assist businesses with cybersecurity risks?

Ravenscroft & Schmierer supports businesses in understanding legal and regulatory considerations related to cybersecurity, including risk management and data protection compliance in Hong Kong.

Why work with Ravenscroft & Schmierer on cybersecurity matters?

Cybersecurity issues often involve regulatory and legal implications. Ravenscroft & Schmierer provides practical guidance to help businesses navigate these risks and operate within Hong Kong’s legal framework.

---

This article is co-authored by Joshua Chu

This article reflects cybersecurity trends identified during 2020–2021 and provides contextual insights into digital risk developments.

Disclaimer: Whilst every effort has been made to ensure the accuracy of this article it is general in nature and does not constitute legal advice of any kind. You should seek your own personal legal advice before taking legal action. We accept no liability whatsoever for loss arising out of the use or misuse of this article.

For specific advice about your situation, please contact:

Anna Lau

Litigation Partner

+852 2388 3899

alau@rs-lawyers.com.hk