TAIPEI (Taiwan News) — The National Security Bureau released its annual report on Chinese cybersecurity threats on Sunday.
According to the report, cyberattacks and intrusions directed at Taiwan’s critical infrastructure by the Chinese Communist Party averaged 2.63 million per day in 2025. The number represents a 6% year-on-year increase compared to 2024, with notable increases in attacks targeting Taiwan’s energy infrastructure, as well as emergency and medical services, reported UDN.
The report on Beijing’s cyber threat said Chinese agents are constantly deploying new methods to test and weaken Taiwan’s defenses. The NSB also noted a correlation between Chinese military drills and a heightened frequency of cyber incidents, suggesting coordination between cyber operations and the People’s Liberation Army’s training exercises targeting Taiwan.
The most cyber incidents in 2025 occurred around May 20, the anniversary of President Lai Ching-te’s (賴清德) inauguration, the report said.
More than 50% of incidents in 2025 were classified as “vulnerability weaponization” attacks. These involved hackers exploiting weaknesses in software and hardware to access sensitive information or use digital systems to create confusion or disrupt services.
Other methods of attack include distributed denial of service attacks, public manipulation via misinformation and disinformation, and supply chain attacks. The report identified 20 incidents targeting Taiwan’s healthcare infrastructure, including ransomware attacks, service disruption at hospitals, and private data leaks on the dark web, per UDN.
The NSB also warned that China’s cyber espionage units have crafted sophisticated campaigns using fraudulent email chains to target individual units and people in Taiwan’s government agencies. Personalized intelligence-gathering operations have also been deployed in the critical semiconductor industry, jeopardizing trade secrets, military technology, and high-level decision-making.
The report identified five of the most active and dangerous Chinese cyber units that engage in targeted operations against Taiwan. The units are: BlackTech, FlaxTyphoon, Mustang Panda, APT41, and UNC3886.
The NSB said it is actively working with partner nations and international cybersecurity experts to monitor, analyze, and defend against China’s cyber espionage operations. The bureau also urged the public to remain vigilant in protecting Taiwan’s critical infrastructure from the Chinese Communist Party.
