Taiwan’s National Security Bureau reported a dramatic increase in Chinese cyber attacks on the island’s critical infrastructure in 2025, with an average of 2.63 million attacks per day up 6% from the previous year and more than doubling the figures from 2023. The attacks targeted essential sectors including hospitals, banks, energy, emergency services, and Taiwan’s semiconductor industry, aiming to disrupt social functions and steal advanced technologies.
The report highlights a concerning pattern: many cyber operations were synchronized with Chinese military drills and "hybrid threats," including disinformation campaigns and military maneuvers near Taiwan. Notably, during 40 Chinese “joint combat readiness patrols,” cyber attacks surged on 23 occasions, indicating a coordinated effort to weaken Taiwan’s defenses during periods of heightened tension.
Taiwanese authorities emphasized that the cyber assaults are part of China’s broader strategy of “hybrid warfare,” combining military, cyber, and informational tactics to pressure the island into accepting Beijing’s sovereignty claims. The report also pointed out increased hacking activities during politically sensitive events, such as President Lai Ching-te’s first year in office and a European Parliament meeting attended by Vice President Hsiao Bi-khim.
The attacks employ various techniques, including distributed denial-of-service (DDoS) operations, man-in-the-middle intrusions, and espionage aimed at Taiwan’s technological advancements, particularly in the semiconductor sector led by firms like TSMC. These efforts are believed to support China’s goal of technological self-reliance and prevent Taiwan from gaining a competitive edge in U.S.-China technology rivalry.
China has consistently denied involvement in hacking activities, asserting that it does not engage in cyber attacks. However, Taiwan remains vigilant, viewing these cyber operations as part of a broader strategy to undermine its sovereignty and stability.
