Credit: Jeremy Thompson, FlickrHong Kong Disneyland has been welcoming guests on Lantau Island since it opened on September 12, 2005. It may be one of Disney’s smaller castle parks, but it has plenty of standouts, from the Castle of Magical Dreams to World of Frozen, the first land themed to Arendelle at any Disney park.
Like most theme parks today, it relies heavily on digital tickets. Guests buy admission online, receive a QR code, and scan it at the gate. It’s quick and convenient, and for most visitors it’s become the default way to get into the park.
That convenience, though, depends on the systems behind those codes staying secure. This week, Hong Kong Disneyland learned what happens when they don’t.
17,000 QR Codes Taken
Hong Kong Disneyland has suspended online ticket sales and hotel bookings after about 17,000 park admission ticket QR codes were stolen from its online ticketing system, the South China Morning Post reported.
According to Hong Kong outlet Dim Sum Daily, the resort’s information-technology team spotted abnormal activity on company computers and found that roughly 17,000 QR codes had been taken from the system. Online ticketing was shut down right away.
The resort confirmed it had detected a cybersecurity incident and reported it to police. Officers have classified the case as access to a computer with criminal or dishonest intent, and the Lantau district crime squad is investigating. As of The Standard‘s report, no arrests had been made.
Scott Gustin noted, “NEW: Hong Kong Disneyland’s online ticket sales and hotel bookings remain suspended after 17,000 park admission ticket QR codes were stolen from its online ticketing system.
The theft was discovered after an IT worker detected unusual activity in the resort’s computer system. Local police are investigating the cyber incident, and Disney is advising guests to purchase tickets through official channels or authorized travel agents.”
NEW: Hong Kong Disneyland’s online ticket sales and hotel bookings remain suspended after 17,000 park admission ticket QR codes were stolen from its online ticketing system.
The theft was discovered after an IT worker detected unusual activity in the resort’s computer system. Local police are investigating the cyber incident, and Disney is advising guests to purchase tickets through official channels or authorized travel agents.
— Scott Gustin (@ScottGustin) November 15, 2026
Website on Pause
“Our online store is currently undergoing system maintenance. In the meantime, if you would like to book tickets or hotel stays, please make your reservations through our contracted travel agents and platforms, official WeChat mini program, Fliggy official store, Douyin authorized store, or Main Entrance Ticket Booths. Thank you for your patience, and we look forward to welcoming you again soon!”
Hong Kong Disneyland hasn’t said when online sales will return.
The resort has also tightened ticket verification at the park entrance. According to Dim Sum Daily, the stricter checks are meant to make it harder for stolen codes to be reused at the turnstiles, though they could slow down entry lines.
How to Buy Tickets Safely Right Now
If you have a trip to Hong Kong Disneyland coming up, you can still get in. You just need to be a little more careful about where you buy.
A resort spokeswoman told the South China Morning Post that Hong Kong Disneyland strongly advises guests to “purchase park tickets directly through official channels” or through its contracted travel agents and platforms.
Based on the resort’s website notice, those options include:
- Contracted travel agents and platforms
- The official WeChat mini program
- The Fliggy official store
- The Douyin authorized store
- The Main Entrance Ticket Booths at the park
With thousands of valid codes in the wrong hands, buying from an unofficial reseller is a real risk right now. A ticket from an unauthorized source could turn out to be one of the stolen codes, and with entry checks tightened, that could mean trouble at the gate. Anyone with concerns has been urged to contact police.
Still Waiting on Answers
There’s a lot we still don’t know about the breach.
It hasn’t been confirmed whether any guest personal information was exposed beyond the ticket QR codes themselves. It’s also unclear exactly how the codes were taken. Dim Sum Daily reported that Cityline handles the resort’s online ticket bookings, while Hong Kong Disneyland’s own IT department oversees its internal network.
Francis Fong, honorary president of the Hong Kong Information Technology Federation, said in comments reported by Dim Sum Daily that the incident points to possible weaknesses in how ticketing QR codes are created, stored, and verified.
We also don’t yet know when the website will reopen for sales, or whether guests who already bought tickets online need to take any action. If you’re holding an online ticket for an upcoming visit, keep an eye on official Hong Kong Disneyland channels for guidance.
Scan Smart, Travel Safe
A stolen batch of QR codes might not sound as dramatic as a ride breakdown, but it’s a big deal for a park that depends on digital tickets. For now, the safest move is simple: stick to official sellers, keep an eye on Hong Kong Disneyland’s channels for updates, and give yourself a little extra time at the gate.
We’ll keep following this story and share updates as the investigation continues.
Are you planning a trip to Hong Kong Disneyland soon? Has this changed how you plan to buy your tickets? Let us know in the comments. And if you’ve already visited since the incident, tell us what the entrance experience was like.
