A country is under attack. No, not that one.
Cyberattacks targeting Taiwan’s key infrastructure rose 6% in 2025 from the previous year to an average of 2.63 million attacks a day, according to a new report from the island’s National Security Bureau, which said most of the activity could be traced to Chinese cyber forces.
The findings offer detail on the scale, targets, and techniques of attacks that Taiwan views as part of Beijing’s broader pressure campaign against the self-ruled island.
The surge, as reported by Reuters today (Jan. 5), underscores how cyberspace has become a central arena in cross-strait tensions, complementing military maneuvers, diplomatic isolation, and economic pressure as China seeks to assert its sovereignty claim over Taiwan.
Chinese cyberattacks
According to Taiwan’s National Security Bureau, the daily average in 2025 is a 113% jump compared with 2023, when the bureau first began publishing such figures. The data points to an escalation in both the scale and intensity of cyber activity targeting Taiwan at a time of heightened friction with Beijing.
Taiwan has long warned of what it calls “hybrid warfare” by China, combining military manoeuvers, cyber operations, and disinformation campaigns. Officials say the aim is not only to gather intelligence but also to erode public confidence, disrupt daily life, and signal China’s ability to exert pressure without crossing the threshold into open conflict.
Hybrid threats and synchronised pressure
The National Security Bureau said many of the cyberattacks were closely coordinated with Chinese military actions around Taiwan. China carried out 40 “joint combat readiness patrols” in 2025, deploying aircraft and naval vessels near the island, and cyberattacks intensified on 23 of those occasions.
“Such a trend indicates a deliberate attempt by China to compromise Taiwan’s crucial infrastructure comprehensively and to disrupt or paralyse Taiwanese government and social functions,” the bureau said.
This synchronisation highlights how cyber operations are increasingly integrated into broader military strategy. Security analysts say such coordination allows Beijing to test Taiwan’s resilience, strain its response capacity, and rehearse tactics that could be used in a crisis or conflict, all while maintaining plausible deniability.
Critical infrastructure in the crosshairs
The report shows that sectors essential to public safety and economic stability were among the most heavily targeted. Energy systems, emergency rescue services, and hospitals experienced the sharpest year-on-year increases in attacks, raising concerns about the potential for real-world disruption.
The bureau said the attacks included distributed denial-of-service operations designed to overwhelm systems and interrupt services, as well as more sophisticated man-in-the-middle techniques aimed at stealing sensitive data and infiltrating telecommunications networks.
Such methods reflect a shift beyond nuisance-level cyber activity toward operations that could have tangible consequences for civilians. Disruptions to hospitals or power supplies, even if temporary, could undermine trust in the government’s ability to protect the population during periods of heightened tension.
Political timing and symbolic moments
Taiwanese officials also noted that cyber activity spiked during politically sensitive moments. Attacks intensified in May when President Lai Ching-te marked his first year in office with a speech, and again in November when Vice President Hsiao Bi-khim addressed a meeting with lawmakers at the European Parliament.
“China’s moves align with its strategic need to employ hybrid threats against Taiwan during both peacetime and wartime,” the report said.
Analysts say such timing is designed to send political messages, signal displeasure with Taiwan’s leadership or international outreach, and potentially deter other countries from strengthening ties with Taipei.
China’s Taiwan Affairs Office did not respond to a request for comment. Beijing routinely denies involvement in hacking attacks.
Technology and the semiconductor battle
Beyond public services, Taiwan’s science parks — central to its globally critical semiconductor industry — have also been prime targets. These hubs house companies such as Taiwan Semiconductor Manufacturing Company, a linchpin of global chip supply chains.
Attackers employed a range of techniques aimed at stealing advanced technologies, the report said. Taiwan’s dominance in semiconductor manufacturing has made it strategically important not only to China but also to the United States and its allies, who rely on Taiwanese chips for everything from consumer electronics to defence systems.
The bureau said the cyber campaigns appeared designed to support China’s push for technological self-reliance and to avoid falling behind in the intensifying U.S.-China technology rivalry. “The move was an attempt to support China’s self-reliance in technology and economic development and prevent China from being put in a disadvantaged position in the U.S.-China technology competition,” the report said.
Broader geopolitical implications
Beijing claims Taiwan as its own territory and has not ruled out the use of force to bring the island under its control. Taipei rejects those claims, insisting that only Taiwan’s people can decide their future.
The surge in cyberattacks adds another layer to an already complex standoff. While cyber operations fall short of kinetic conflict, their cumulative effect can be destabilising, particularly when paired with military drills and diplomatic pressure.
For Taiwan, the findings underscore the urgency of strengthening cyber defences, protecting critical infrastructure, and working with international partners to counter digital threats. For the wider international community, the report offers a glimpse into how cyberwarfare is becoming an integral tool of state power, with implications that extend far beyond Taiwan’s borders.
Even space agencies can’t escape gravity… especially when a hacker claims they’ve walked off with hundreds of gigabytes of internal data.