SENTINEL DEFENDERS BRIEFING
Human rights developments through the lens of defender protection, justice and accountability.
Issue #002 | 19 October 2026
Editor’s note
This issue examines whether protection works in practice: for Hongkongers facing immigration detention in the United States, a commentator defending himself against national security-related charges, and imprisoned people seeking contact with those closest to them.
We also consider restrictions on access to banking, intimidation affecting a Hongkonger in Taiwan and pressure on international exchange. We close with a warning about remote-support software exploited in an espionage intrusion.
These are separate developments, not evidence of one coordinated campaign. Our concern throughout is whether people can obtain advice, challenge decisions, maintain relationships and receive meaningful support.
1. Hongkongers in the United States: Detention despite protection from removal
POLITICO reported on 10 October that Immigration and Customs Enforcement officers had detained at least 12 Hongkongers at US airports since June, despite their coverage under Deferred Enforced Departure.
According to lawyers and detainees interviewed by the publication, officers threatened prolonged detention unless individuals agreed to leave. All 12 people whose cases were described to POLITICO were subsequently released following immigration court rulings, after periods in custody ranging from ten days to two months. They remained subject to ankle monitoring and travel restrictions.
These accounts do not establish that every detention involved identical circumstances or that a court found every detention unlawful.
The protection and its limits
US Citizenship and Immigration Services lists the current DED period for eligible Hong Kong residents as ending on 5 February 2027. Coverage depends on specified requirements and exclusions; it does not apply automatically to every Hongkonger in the United States.
DED does not itself confer an immigration status. The Department of Homeland Security told POLITICO that covered individuals may still be placed in removal proceedings. Lawyers representing detainees challenge the government’s approach.
Protection from removal, removal proceedings and detention are distinct legal questions. The absence of a separate immigration status does not, by itself, settle whether a particular detention is lawful.
The proposed Hong Konger Promise of Refuge Act would establish a permanent-residence pathway for certain eligible Hong Kong residents. Official records identify S.5606 as introduced on 30 September and H.R.10685 on 1 October. The accessible records are introduced versions, not enacted legislation.
Sentinel Defenders’ Response
Protection should mean more than postponing a flight. If people covered by a protection measure are detained and pressured to agree to leave, its purpose is seriously undermined.
The allegations of coercion deserve independent scrutiny. A decision to leave must be informed and voluntary, not secured through threats of prolonged confinement. Those detained need meaningful access to advice and an opportunity to challenge their detention.
A durable solution is urgent. People should not face an abrupt protection gap after rebuilding their lives under an arrangement created in response to human rights concerns. The expiry of a programme is not proof that return is safe.
2. Hong Kong: Wong On-yin’s trial continues
Commentator Wong On-yin, whose original name is Wong Kok-on, denies charges of prejudicing a national security investigation and knowingly publishing material with seditious intention.
The case concerns alleged disclosure of a national security police meeting and 30 videos that the prosecution alleges were seditious. The Witness’s reporting records the trial’s opening on 9 October and subsequent proceedings.
Disclosure and political commentary
In its report on 12 October, The Witness describes recorded material in which Wong explained his understanding of a confidentiality document and why he discussed the police meeting publicly.
Wong said he understood the meeting as a conversation rather than a formal investigation and believed news of it was already public. The prosecution’s position is that he unlawfully disclosed details of police inquiries. Public knowledge that a meeting occurred does not resolve whether its contents could lawfully be disclosed.
Reporting on 13 October describes videos criticising the National Security Law, prosecutions and official warnings about “soft resistance.” The prosecution also relied on a thumbnail slogan calling for continued efforts against the Chinese Communist Party.
Latest verified hearing
Reporting on 16 October states that the prosecution played two further videos and two recorded interviews.
In the interviews, Wong acknowledged producing and publishing the material, while saying he was sharing his opinions. He also discussed his support for “soft resistance” and distinguished not voting from encouraging blank votes.
The report states that he remained without legal representation and that the case was due to resume on 20 October. It reports no verdict. The case number is DCCC 303/2026.
Sentinel Defenders’ Response
People must be able to criticise laws, question prosecutions and challenge official accounts. Those rights matter most when the criticism is unwelcome.
Strong language or opposition to a governing party should not, by itself, settle whether criminal incitement occurred. We do not endorse violence, but warning about possible unrest is not automatically an instruction to cause it. Meaning and intent must be examined in context.
The phrase “soft resistance” must not become a substitute for identifying unlawful conduct. The separate disclosure charge also requires close attention to clear legal obligations, access to advice and fair proceedings.
3. Hong Kong: Chow Hang-tung’s appeal and concerns about correspondence
Chow Hang-tung was sentenced to seven years and three months’ imprisonment for incitement to subversion on 11 September 2026, according to the Hong Kong Government’s official announcement of the sentences.
CNA reported on 7 October that she was appealing her conviction and sentence. No appeal hearing had been scheduled at the time of that report. This briefing has not independently confirmed a subsequent hearing date.
Concerns about her correspondence predate the appeal. In a statement published by Amnesty International in February, her fiancé, rights advocate Ye Du, said that only one of more than ten letters she wrote to him in 2025 had reached him.
That is Ye’s account of earlier correspondence. It does not establish what happened to any particular letter sent or expected this October.
Sentinel Defenders’ Response
A letter can be a vital connection to life outside prison. Its importance is not diminished because it contains ordinary affection rather than legal or political discussion.
Reports of interrupted correspondence deserve a clear explanation. People should be able to understand whether a letter was delayed, refused or lost, and what review is available.
Security arrangements should not unnecessarily sever personal relationships. Maintaining those relationships is part of humane treatment, not an indulgence to be withdrawn without adequate explanation.
4. Hong Kong: Account restrictions raise questions about police powers and safeguards
An episode of HOY and Cable News’s A Closer Look, published on 14 October, reports a customer’s complaint about restrictions affecting his bank account. He describes difficulties making transfers, obtaining explanations and maintaining automatic payments.
The available report does not establish whether this particular restriction resulted from a court order, police communications, a letter of no consent or a bank’s independent assessment. It also does not establish a rule that transfers above HK$10,000 automatically trigger a freeze.
The legal distinction matters
Police communications can play a role in restrictions imposed by banks. However, a letter of no consent is not the same legal instrument as a court-issued restraint order.
According to the Department of Justice’s official summary of Tam Sze Leung v Commissioner of Police, the Court of Final Appeal unanimously dismissed a challenge to the letters-of-no-consent regime on 10 April 2024.
The court held that police communications aimed at preventing money laundering fell within police duties and powers. It distinguished those communications from the banks’ decisions to restrict accounts under their own legal and regulatory obligations. The court also recognised the confidentiality of sensitive investigative information.
That ruling does not establish what occurred in the customer’s case featured in the programme. Nor should an inability to identify the mechanism be reported as proof that police acted unlawfully.
Sentinel Defenders’ Response
The central issue is not simply whether a bank answers its customer’s calls. Where police action contributes to restrictions on someone’s money, the public needs to understand the powers being used, who is responsible and how mistakes or excessive restrictions can be challenged.
We recognise the Court of Final Appeal’s ruling. Our call is for stronger practical accountability and accessible safeguards, not a claim that the regime has been held unlawful.
People should not be left guessing whether an ordinary payment or transfer will put their account beyond reach. We are not asking authorities to publish thresholds that would help criminals evade detection. We are asking for clear information about the applicable process, review arrangements and routes to challenge a restriction.
Authorities should explain the framework under which they act and publish meaningful information about oversight and the duration of restrictions, without compromising legitimate investigations. Banks should clearly identify the steps a customer can take. Responsibility must not disappear between the police and the bank.
A financial centre’s credibility depends on predictable rules and confidence that lawful access to money will not be restricted without effective safeguards. Unexplained restrictions and inaccessible remedies risk undermining that confidence in Hong Kong.
5. Hongkongers in Taiwan: The continuing effects of intimidation
Taiwan’s Mainland Affairs Council released a documentary on 8 October featuring Tong Wai-hung, known as Fu Tong, whose Taipei Muay Thai studio was twice targeted with red paint.
CNA’s report dates the attacks to November 2025 and February 2026. Council spokesperson Liang Wen-chieh characterised them as transnational repression and said suspects travelled from Hong Kong and left after the incidents.
Tong described the impact on his studio and the despair he initially felt. He said attention from the authorities and media helped him begin to recover. The council urged the public to support those affected rather than dismiss their experiences.
The official characterisation of the incidents does not, by itself, establish who commissioned or directed them.
Sentinel Defenders’ Response
Leaving Hong Kong should not mean carrying the fear of retaliation into a new home or workplace.
Protection cannot end when an immediate incident is over. Fear can affect livelihoods, relationships and willingness to speak long afterwards.
We support a thorough investigation and sustained practical assistance. Communities and institutions should also avoid treating people exposed to intimidation as security risks merely because of their background. Protection must reduce isolation, not deepen it.
6. International exchange: Reported pressure on participants
US recruitment for professional exchange programmes involving mainland China, Hong Kong and Macau was reportedly halted in late July.
In reporting published on 15 October, VOA cites a Kyodo investigation concerning the International Visitor Leadership Program and Professional Fellows Program.
According to that account, a memorandum described excessive interference by Chinese authorities, including pressure to withdraw, harassment, threats and arrests. VOA said the State Department had not responded to its inquiry by publication.
Former legislator Sin Chung-kai told VOA that earlier participation helped broaden his understanding of technology and institutions. The reporting concerns particular programmes and recruitment arrangements, not a blanket ban on all Hong Kong–US academic or professional exchange.
Sentinel Defenders’ Response
People should be able to participate in lawful international exchange without threats or punishment.
The central concern is the reported pressure on individuals seeking to learn and build relationships. Those allegations deserve investigation, and support should not disappear when a programme closes.
Preserving safe opportunities for contact matters. Further isolation can reinforce the outcome intimidation seeks to achieve.
7. Digital security: BeyondTrust Remote Support exploited in espionage intrusion
Google Threat Intelligence Group and Mandiant reported on 15 October that an actor they track as ARMORY CASTLE exploited CVE-2026-102764 in BeyondTrust Remote Support as a previously undisclosed vulnerability in late August.
The vulnerability permits arbitrary file uploads. Mandiant’s investigation documented subsequent privilege escalation, persistent access, attempts to harvest credentials, theft of internal documents and deletion of logs.
Google attributes the activity to a suspected China-linked espionage actor formerly tracked as UNC5221. That is a threat-intelligence assessment, not a judicial finding of state responsibility.
The report warns of potential wider exploitation following disclosure. It does not establish that every customer was compromised or that the civil society groups discussed in this briefing were targeted.
For organisations using the product
Mandiant recommends checking exposure and applying the relevant remediation. Its report states that BeyondTrust patched SaaS tenants on 9 October; self-hosted installations require verification of their patch or upgrade status.
Patching alone does not resolve a previous compromise. Exposed systems may require investigation, evidence preservation and credential review. Mandiant specifically advises rotating credentials after the appliance has been patched or rebuilt, to avoid exposing replacements to an attacker still present.
Organisations should follow the detailed guidance with their IT provider or qualified incident responders rather than treat this summary as a complete recovery procedure.
Sentinel Defenders’ Response
Digital security is part of protecting people. A compromised support system can expose information about staff, contacts and those who approach an organisation for help.
Organisations need to know which remote-support systems their providers use and who is responsible for checking exposure. Smaller groups need accessible support, not simply instructions to “improve cybersecurity.”
Where an incident is suspected, the response must consider people as well as devices: whose information may have been accessed, what risks follow and how to communicate without creating further exposure.
About this briefing
Sentinel Defenders Briefing examines developments affecting human rights defenders, victims of human rights abuses and their families.
Drawing on documented reporting and legal developments, it offers analysis centred on protection, solidarity, justice and accountability.
Published by Sentinel Defenders Network.
Statements under “Sentinel Defenders’ Response” represent the organisation’s position and may be quoted with attribution to Sentinel Defenders Network.
This briefing is for general information and does not provide legal advice.
