Hybrid reconfigurable intelligent surfaces (HRISs) constitute an emerging paradigm of metasurfaces that empowers the concept of smart wireless environments, inherently supporting simultaneously communications and sensing. Very recently, some preliminary HRIS designs for Integrated Sensing And Communications (ISAC) have appeared, however, secure ISAC schemes are still lacking. In this paper, we present a novel communications-centric secure ISAC framework capitalizing on the dual-functional capability of HRISs to realize bistatic sensing simultaneously with secure downlink communications. In particular, we jointly optimize the BS precoding vector and the HRIS reflection and analog combining configurations to enable simultaneous accurate estimation of both a legitimate user and an eavesdropper, while guaranteeing a predefined threshold for the secrecy spectral efficiency, with both operations focused within an area of interest. The presented simulation results validate the effectiveness of the proposed secure ISAC design, highlighting the interplay among key system design parameters as well as quantifying the trade-offs between the HRIS's absorption and reflection coeffcients.