The Hong Kong Monetary Authority has delivered a sobering assessment of the banking sector’s preparedness for one of the next major cybersecurity challenges: quantum computing.
In its latest evaluation, the regulator found that Hong Kong banks scored an average of just 2.3 out of 10 on quantum readiness, highlighting how far the financial industry still has to go before it can defend itself against the risks posed by future quantum computers.
Even more concerning, roughly half of the surveyed banks admitted they have no formal post-quantum migration strategy, leaving critical financial infrastructure vulnerable as quantum technology advances.
Quantum computing promises breakthroughs across science, healthcare, logistics, and artificial intelligence by solving problems that are impossible for today’s computers. The same computational power also threatens modern encryption standards that secure digital banking, payment networks, customer data, and financial communications.
Register for Tekedia Mini-MBA edition 20 (June 8 – Sept 5, 2026).
Register for Tekedia AI in Business Masterclass.
Join Tekedia Capital Syndicate and co-invest in great global startups.
Algorithms such as RSA and Elliptic Curve Cryptography, which underpin much of today’s internet security, could eventually be broken by sufficiently powerful quantum computers. Although experts believe practical cryptographically relevant quantum computers are still several years away, the threat is no longer considered theoretical.
Cybersecurity professionals have increasingly warned of harvest now, decrypt later attacks, in which hackers steal encrypted information today with the intention of decrypting it once quantum technology matures.
Sensitive financial records, customer identities, and confidential transactions could all become targets under such a scenario. Recognizing this growing risk, the HKMA has taken a proactive stance by introducing a comprehensive roadmap for financial institutions.
Rather than simply highlighting weaknesses, the regulator has issued a practical toolkit designed to help banks assess their existing cryptographic infrastructure, identify vulnerable systems, and develop structured migration plans toward post-quantum cryptography (PQC).
The authority has also established a clear objective: banks should reach full quantum readiness by 2030. This long-term deadline reflects the complexity of transitioning an entire financial ecosystem to new cryptographic standards.
Replacing encryption is not as simple as installing a software update.
Banks operate thousands of interconnected systems, ranging from online banking platforms and mobile applications to payment gateways, ATMs, trading infrastructure, cloud services, and third-party integrations. Every component relying on current encryption standards must eventually be upgraded without disrupting financial stability or customer services.
The HKMA’s findings reveal an uneven level of awareness across the industry. While some major institutions have already begun conducting quantum risk assessments and pilot programs, many smaller lenders remain in the early stages of understanding the problem.
The average readiness score of 2.3 out of 10 suggests that most organizations are still focused on identifying risks rather than implementing concrete solutions. Hong Kong’s initiative aligns with a broader global movement among financial regulators.
Governments and cybersecurity agencies worldwide have accelerated efforts to encourage the adoption of post-quantum cryptography following the publication of new quantum-resistant encryption standards.
Financial institutions are increasingly expected to inventory cryptographic assets, prioritize critical systems, and begin gradual migration well before quantum computers become capable of breaking existing encryption.
Strengthening quantum resilience is also a matter of maintaining its reputation as one of the world’s leading international financial centers. As digital finance, tokenized assets, and cross-border payment networks continue to expand, ensuring that banking infrastructure remains secure against emerging technological threats will become increasingly important.
The HKMA’s assessment serves as both a warning and an opportunity. A readiness score of 2.3 out of 10 underscores the magnitude of the work ahead, but the regulator’s structured toolkit and 2030 target provide a clear path forward.
Banks that begin preparing now will be better positioned to safeguard customer trust, comply with future regulations, and remain resilient in the quantum era.