HKCERT reviews H1 incidents: phishing remains the leading category, highlighting everyday communications accounts
HKCERT published its review of the first half of 2026, reporting 8,358 security incident reports, of which phishing accounted for 63%. Impersonated services included social messaging, financial payments and online trading, underlining the importance of protecting everyday accounts.
Source Facts
HKCERT published January–June incident statistics on 31 August, including 5,305 phishing reports as well as botnets, malware and other categories. These figures cover reports received by HKCERT, not all incidents in Hong Kong.
Among brand categories impersonated in phishing cases, social media and messaging services were the largest group, followed by categories including banking and finance, electronic payments, cryptocurrency and ecommerce platforms. The article uses these observations to examine how attackers exploit everyday digital habits.
Business payment, customer service and messaging accounts need clear verification procedures so staff do not rely only on familiar brand imagery.
Original sources
Mid-Year Review: HKCERT Security Incident Statistics and Cybersecurity Trends in the First Half of 2026
Sources checked: 2026-10-26 · Prepared with SI agent assistance; articles have not been individually reviewed by a person.
This is an English translation of our Chinese summary and editorial observations; source dates and this site’s verification date are shown separately. If an original advisory changes, refer to the source.
KEEP READING
Recommended reading
IllustrationPHP patches and configuration follow-up: Unit 42 corrects its assessment of one intrusion's cause
IllustrationLiteLLM explains package compromise: exposed keys must be revoked to complete the response
Illustration