Hong Kong Banks Score 2.3/10 on Quantum Readiness as HKMA Sets 2030 Deadline

Hong Kong's banking sector scored just 2.3 out of 10 on the Hong Kong Monetary Authority's first Quantum Preparedness Index, launched July 27, 2026—a stark assessment of readiness against quantum-era cyber threats.

The regulator gave the industry until 2030 to reach full readiness, warning that the current state leaves one of the world's largest financial hubs exposed to "harvest-now-decrypt-later" attacks, where encrypted data stolen today could be cracked once quantum computers mature.

Four Pillars of Preparedness

The Quantum Preparedness Index evaluates banks across four categories: awareness, planning, pilot projects, and operational readiness. The aggregate score indicates most institutions remain in the earliest phases of preparing for the quantum threat.

According to the HKMA, "most banks are still building the foundations for a transition to the quantum era."

Survey data reveals a fragmented response across the sector. While 68% of banks have begun some form of preparation, 32% have taken no steps at all. Approximately half of surveyed banks operate without a formal road map for adopting post-quantum cryptography (PQC)—the quantum-resistant encryption standards needed to replace current vulnerable protocols.

The Harvest-Now-Decrypt-Later Threat

Quantum computers pose an existential risk to current encryption standards that protect everything from customer data to interbank transactions. Security experts warn that adversaries are already harvesting encrypted data with the expectation that future quantum machines will decrypt it.

The HKMA's initiative forms part of its 2026 Fintech Promotion Blueprint, which aims to position Hong Kong as a leader in financial technology while ensuring systemic resilience. By quantifying preparedness with a numerical index, the regulator creates a measurable benchmark that can track progress and apply public pressure on laggard institutions.

Race Against Time

The four-year timeline to 2030 reflects the urgency of the transition. Migrating to post-quantum cryptography requires overhauling legacy systems, testing new protocols, and ensuring interoperability across the global financial network—a process that cannot be rushed without introducing new vulnerabilities.

The index results will likely trigger accelerated investment in quantum-resistant security frameworks across Hong Kong's banking sector, with regulators expected to publish more detailed guidance on compliance expectations in coming months.