Cyber Incidents Are Hitting Most Hong Kong Businesses, QBE Survey Finds

Cyber incidents are now a routine risk for businesses in Hong Kong. A recent global survey by QBE Insurance shows that a majority of local companies have experienced cyber events within the past year, with measurable financial and operational consequences.

At the same time, business leaders remain strongly optimistic about artificial intelligence (AI). The research highlights a growing tension: enthusiasm for AI adoption is rising quickly, but cyber resilience—including insurance coverage, response planning, and third‑party risk management—has not always kept pace.

Cyber incidents affect most Hong Kong businesses

The QBE survey found that 59% of Hong Kong businesses experienced at least one cyber event in the past year, slightly higher than the 58% global average reported across the study’s 15 surveyed markets.

Cyber incidents are not only frequent but also financially significant. 27% of Hong Kong businesses reported at least one AI‑related cyber incident in the previous year, illustrating how newer technologies are becoming part of the threat landscape.

These findings place Hong Kong broadly in line with other digitally advanced economies where companies face continuous exposure to phishing, malware, data breaches, and other cyber threats.

Revenue loss and business disruption remain common

Operational disruption is a major consequence when cyber incidents occur. According to the survey, 18% of Hong Kong businesses experienced at least one cyber incident that caused a day or more of business interruption.

This aligns with broader global research from QBE showing that one in seven businesses worldwide lost a full day or more to a cyber event in the past 12 months.

Even short outages can create cascading costs—from lost revenue and halted operations to reputational damage and regulatory exposure—making cyber resilience a core business risk rather than just an IT issue.

AI optimism is extremely high among Hong Kong companies

Despite growing cyber exposure, business leaders in Hong Kong remain overwhelmingly optimistic about AI’s potential.

In the QBE survey:

• 96% of Hong Kong business and technology leaders expect AI to have a positive impact over the next two years.
• This optimism slightly exceeds the 92% global average reported across surveyed markets.

The results suggest companies are eager to deploy AI to improve productivity, decision‑making, and operational efficiency. However, faster adoption can also expand the attack surface for cyber threats.

AI is reshaping the cyber threat landscape

While the survey does not provide detailed percentages for specific tactics such as AI‑generated phishing or deepfake fraud, it confirms that AI‑driven cyber incidents are already affecting businesses.

The finding that 27% of Hong Kong companies reported an AI‑related cyber event demonstrates that attackers are beginning to exploit AI tools to scale and automate attacks.

Security researchers increasingly warn that generative AI can make phishing campaigns more convincing, enable automated social‑engineering attempts, and help attackers craft malware or reconnaissance strategies more quickly.

Preparedness gaps remain across businesses

Perhaps the most important takeaway from the survey is the gap between optimism and readiness.

Although companies are enthusiastic about AI and aware of cyber risks, the research indicates that many organizations still lag in practical defenses, including:

• cyber insurance coverage
• formal incident response plans
• structured third‑party or supply‑chain cyber risk management

Supply‑chain exposure is particularly notable. The survey indicates that nearly half of businesses in Hong Kong and Singapore have experienced a supply‑chain cyber attack, where attackers exploit vulnerabilities in vendors or partners.

Because modern organizations rely heavily on interconnected systems and external suppliers, weaknesses in third‑party networks can become entry points for attackers.

What the survey signals for Hong Kong businesses

The QBE findings reinforce several broader trends shaping cyber risk across Asia:

• Cyber incidents are becoming routine rather than exceptional.
• Operational disruption is a common outcome when attacks succeed.
• AI adoption is accelerating faster than many companies’ cyber defenses.

For many organizations, the challenge is not recognizing the threat—but aligning cybersecurity strategy, insurance protection, and incident response capabilities with the pace of digital transformation.

As AI becomes more deeply embedded in business operations, the balance between innovation and resilience will increasingly determine how well companies can manage cyber risk in the years ahead.