Hong Kong Disneyland Ticketing System Sees 17,000 QR Codes Stolen; FBI Warns of AI Attack Framework's Automated Intrusion — Daily AI and Cyber Risk Summary
In a nutshell: A suspected cyber incident at Hong Kong Disneyland led to about 17,000 ticket QR codes being stolen and online ticket sales being suspended; meanwhile, the FBI warns that the open-source AI attack framework ARTEX can now obtain privileged access automatically within three hours, and cyber security pressure across Asia continues to rise.
Hong Kong Disneyland Online Ticketing System Suspected of Intrusion
The Information Technology department of Hong Kong Disneyland Resort detected anomalous activity in its computer systems in the late night of Thursday (12 November), initially finding that about 17,000 QR codes in its online ticketing system were suspected stolen. The resort immediately suspended online ticketing operations, strengthened admission verification procedures, and reported to the Police, the Tourism Commission, and the Office of the Privacy Commissioner for Personal Data; the Police classified the case as "access to a computer with criminal or dishonest intent" and handed it to the Major Crime Unit of the Lantau Island district, with no arrests made so far. Experts believe the incident reflects possible vulnerabilities in the ticketing system's QR-code generation, storage, and verification mechanisms, and urge the public to purchase tickets only through official or authorised channels. (Sources: Hong Kong Commercial Daily / Wen Wei Po, PCM, Yahoo News, China Labour Bulletin, 2026-11-14)
FBI Warns of ARTEX AI Attack Framework's Automated Intrusion
On 13 November, the US Federal Bureau of Investigation (FBI) issued FLASH-20261113-001, warning that the open-source, large-language-model-driven agentic penetration-testing framework ARTEX has been weaponised by criminal and state-linked groups to automate intrusions from reconnaissance to data theft, with some operations obtaining privileged access within three hours of a target being set. The FBI noted that since August 2026 such operations have spanned the financial, government, technology, healthcare, energy, and telecommunications sectors across countries; cases include a South Korean financial institution's leak of about 67,000 individuals' personal data and the ConnectWise Cloud Backup supply-chain intrusion affecting over 2,250 downstream tenants. As of early November, researchers had found over 1,600 publicly exposed ARTEX consoles. (FBI, 2026-11-13; relayed by CASRAI, Times of AI, AISeng Tech)
HKMA Warns Against Fraud Amid Microsoft Global Service Outage
A spokesperson for the Hong Kong Monetary Authority said it is aware that some Microsoft services have suffered outages in multiple locations worldwide and is closely monitoring the situation and its potential impact on banking services; at present all retail banks in Hong Kong maintain normal operation of their critical systems (including deposits and transfers), and the HKMA will continue to communicate with and monitor banks. The HKMA and the Hong Kong Association of Banks also reminded the public to stay vigilant against criminals exploiting system outages or updates as a pretext to impersonate Microsoft, banks, or related institutions and send phishing messages to steal sensitive information such as login passwords or one-time passwords. (Sources: Bauhinia Network / Hong Kong & Macau Daily, 2026-11-14/15)
Taiwan's Cyber Insurance Premium Up Nearly 40% in First Three Quarters
According to Taiwan's property and casualty insurance industry, cyber insurance written premiums reached NT$564 million in the first three quarters of this year, up about NT$160 million from NT$404 million a year earlier — a year-on-year growth rate of 39.6%; policy count rose by 94 to 692, up 15.72% year-on-year. The premium increase markedly outpaced the policy count, reflecting that as the market expands, average coverage per policy is also rising. On the international market, Marsh McLennan's Q3 Global Insurance Market Index shows global cyber insurance rates fell 4%, declining for the 13th consecutive quarter; Aon's report notes that in Q2 about 15% to 18% of clients increased cyber insurance limits, and some insurers launched endorsements clarifying AI coverage. (Source: Commercial Times, 2026-11-14)
Japan's October Cyber Incidents Hit Record High; Research Points to AI-Assisted Attacks
Japanese research bodies JPCERT/CC, Macnica, and MM Research Institute reported that publicly disclosed cyber incidents in Japan reached 233 in October — about 2.4 times the previous single-month record — with around 185 million personal records leaked, close to four times the full-year 2025 total; web-system intrusions alone hit 288 in the month (versus just 84 for all of 2025). Researchers observed attackers using AI tools to scan for known vulnerabilities, probe APIs, and hunt for server-side request forgery (SSRF) weaknesses, though AI's exact contribution to the overall rise remains to be confirmed. The case provides an early signal for other highly digitalised Asian markets. (GBHackers, 2026-11-14)
The content of this column is provided for general information and educational purposes only, and does not constitute insurance, legal, or professional advice. Actual coverage is subject to the terms of individual policies.