HKMA Launches SAGE for AI Governance; MoneySmart Breach Affects Hong Kong Customers — Daily AI and Cyber Risk Summary

In a nutshell: Hong Kong FinTech Week 2026 has concluded, with regulators jointly advancing AI governance and cyber security frameworks; meanwhile, comparison platform MoneySmart confirmed a system breach with some Hong Kong customers' data copied, and AI "jailbreak" attack research warns that agent risk is rapidly becoming physical.

This column synthesises developments over the past two days and outlines five key points worth noting by enterprises and individuals.

I. HKMA Launches the "SAGE" Project, Balancing Agentic Finance Governance and Application. At FinTech Week, HKMA Chief Executive Eddie Yue announced four new developments under the DART framework (Data, Artificial Intelligence, Tokenisation, cyber security / Resilience) and launched the "SAGE Project" (Securing Agentic Finance with Governance and Enablement), establishing a cross-sector expert group to advance agentic finance from both application and governance angles, while consulting the public on Accountability, Resilience, and Trust (the ART framework). (Sources: Sina Finance, 2026-11-03; China Securities Journal, 2026-11-03)

II. Insurance Authority to Introduce an AI Governance Framework for the Insurance Sector. HKIA Executive Director Eric Kwong said the AI Facilitation Initiative has prompted several insurers to set up AI centres of excellence in Hong Kong and generated over 800 use cases, and that the regulator will soon introduce an AI governance framework for the insurance industry to foster compatible and responsible innovation. (Source: China Securities Journal, 2026-11-03)

III. SFC Plans to Set Cyber Security Baselines for All Licensed Institutions. SFC Chief Executive Julia Leung cited its large-institution AI survey: of 20 surveyed financial groups, over half have already used or piloted agentic AI, with 80% expecting to expand adoption within a year; the SFC will formulate pragmatic guidance for high-autonomy AI and plans to establish a cyber security framework and baseline requirements for all licensed institutions. (Source: China Securities Journal, 2026-11-03)

IV. MoneySmart System Breached; Some Hong Kong Customers' Data Affected. Financial product comparison platform MoneySmart said it discovered on 29 October that unauthorised third parties had accessed parts of its internal systems, confirming that personal data of some Singaporean and Hong Kong customers — including names and email addresses — had been copied; the company has terminated access, notified the authorities, and engaged forensic experts to investigate. (Sources: Yahoo Finance / AASTOCKS, Sing Tao Daily, 2026-11-03)

V. AI "Jailbreak" Risk Heats Up. A team at Zhejiang University discovered agent "chain jailbreaking" — breaking high-risk objectives into multiple seemingly compliant step-by-step tasks to bypass review; the research notes that an agent can go from discovering a vulnerability to deploying an attack in as little as 27 seconds. Anthropic CEO Dario Amodei also wrote a warning that clusters of frontier AI agents could cause hundreds of billions of dollars in losses. (Source: Tencent News, 2026-11-04)

The content of this column is provided for general information and educational purposes only, and does not constitute insurance, legal, or professional advice. Actual coverage is subject to the terms of individual policies.