Hong Kong concludes 60-hour cybersecurity drill with record participants
Hong Kong's three-day cybersecurity drill 'Attack to Defend 2026' ended on 31 October, involving 51 defending teams from government departments, public bodies and private firms, and 23 attacking teams from Hong Kong, mainland China and Guangdong province. A report will be shared with participants fo
A three-day cybersecurity drill, the 'Hong Kong Cybersecurity Attack-Defence Exercise – Attack to Defend 2026', concluded on the evening of 31 October after 60 consecutive hours. The exercise simulated real cyber-threat scenarios through 'real troops', 'real networks' and 'real combat' methods to identify system vulnerabilities and test the defensive deployments and response capabilities of participating departments and organisations, with the aim of enhancing Hong Kong's overall cybersecurity protection and resilience.
This year's event saw an expanded scale, with a total of 51 defending teams covering 28 government departments, 23 public bodies, and, for the first time, designated information systems from private enterprises. The 23 attacking teams included representatives from 15 cybersecurity professional institutions in Hong Kong and mainland China, as well as four local tertiary institutions. Three attacking teams were recommended by the Guangdong Provincial Internet Information Office, and one team was deployed by the Digital Office.
All participating systems and services remained operational throughout the exercise. A drill report will be provided to the relevant government departments, public bodies and private enterprises that took part, for their reference and follow-up actions.
