Hong Kong banks lag in race to thwart future quantum cyber threats

While governance discussions have gained traction—with roughly half of surveyed banks bringing quantum concerns to the boardroom—actual technical migration remains in its infancy. Data from the regulator reveals that 32% of financial institutions have yet to initiate any formal transition plans to counter post-quantum cryptography risks. The current index score does not reflect a breach of existing systems, but rather the industry’s limited progress in identifying vulnerable infrastructure and piloting replacements for aging encryption protocols.

Financial institutions are grappling with the "harvest now, decrypt later" threat, where adversaries intercept sensitive data today with the intent of unlocking it once quantum hardware matures. To bridge this gap, the HKMA is partnering with the Hong Kong University of Science and Technology to launch a specialized cryptography toolkit. This initiative aims to bolster "cryptographic agility," allowing banks to swap vulnerable algorithms without requiring a total overhaul of their digital architecture. Although the 2030 target for a perfect score is an objective rather than a hard regulatory mandate, the urgency is echoed globally, with the U.S. government already mandating federal transitions to NIST-approved post-quantum standards.