The third annual “BugHunting Campaign”, jointly organised by the Hong Kong Police Force, the Office of the Privacy Commissioner for Personal Data, and Cyberbay, a crowdsourced cybersecurity company, has concluded successfully. The Awards Gala was held on October 3, 2025 at The Langham Hong Kong, with a total of 55 organizations that successfully remediate vulnerabilities within the given timeframe or demonstrated a solid cybersecurity foundation were awarded with digital badges recognizing their commitment to cybersecurity excellence.

“BugHunting 2025”was conducted over eight consecutive weeks from July to August this year. Through network vulnerability detection, it helped participating organisations understand their cybersecurity status and provided free one-on-one professional consultation to establish a more robust defense system. This year, a total of 185 organisations participated, a 20% increase compared to last year. Approximately 40% of them were startups or local small and medium-sized enterprises (SMEs), while 20% were non-profit organisations or public institutions. The participating organisations covered industries such as finance, technology, tourism, healthcare, education, and manufacturing, reflecting the growing emphasis on cybersecurity across various sectors in Hong Kong.

Through the collaboration of AI technology and cybersecurity experts, 223 vulnerabilities were identified across the participating organizations, a 150% increase compared to the previous year. Of these, 3% were classified as critical and 1% as high-risk. Over 90% of the participating organizations exhibited vulnerabilities. After technical tests, participating organizations received multiple remediation recommendations on average, half of which were high-priority improvements, such as enhancing customer data protection, securing business accounts, and preventing phishing emails.

 “BugHunting 2025” is an annual cybersecurity initiative designed to bolster the digital safety of Hong Kong’s business landscape. By uniting corporations, cybersecurity experts, and regulatory bodies, the campaign works proactively to identify and remediate vulnerabilities, enhance defensive capabilities, and promote a robust culture of cybersecurity.

The following is a list of badge-winning organisations (in no particular order):