Taiwan has reported an unprecedented surge in cyberattacks originating from China, with an average of 2.63 million incidents a day recorded throughout 2025, according to a new government report.

The findings, released on Sunday by Taiwan’s National Security Bureau, show attacks on critical infrastructure-including banks, hospitals and government systems-rose by 6 per cent compared with the previous year.

The bureau warned the activity was no longer sporadic but increasingly coordinated with Chinese military manoeuvres, creating what it described as a ‘hybrid threat’ aimed at destabilising the self-governed island.

The rise of ‘grey zone’ warfare

Taiwan has long been a focal point of so-called ‘grey zone’ warfare - coercive actions that fall short of open conflict. The latest figures point to a sharp escalation.

The daily average of cyberattacks in 2025 represents a 113 per cent increase compared with 2023, when the bureau first began publishing such data.

While earlier campaigns focused largely on espionage, the report said recent activity had shifted towards operational disruption. Energy networks, emergency services and healthcare systems recorded the steepest year-on-year rises in targeting.

"Such a trend indicates a deliberate attempt by China to compromise Taiwan’s crucial infrastructure comprehensively and to disrupt or paralyse Taiwanese government and social functions," the report stated.

The bureau added that China’s cyber operations were increasingly coordinated with the People’s Liberation Army. 

In 2025, Beijing launched 40 "joint combat readiness patrols," sending military aircraft and naval vessels dangerously close to the island.  On 23 of those occasions, cyberattacks intensified at the same time.

Political triggers and diplomacy

The report said cyber activity closely tracked sensitive political moments and diplomatic engagement.

Attacks surged in May 2025 after President Lai Ching-te marked his first year in office with a public address. Beijing regards Lai as a separatist and has rejected his calls for dialogue.

A similar spike was recorded in November when Vice President Hsiao Bi-khim met lawmakers at the European Parliament, a visit that prompted strong criticism from Beijing.

"China’s moves align with its strategic need to employ hybrid threats against Taiwan during both peacetime and wartime," the report noted.

Targeting Taiwan’s ‘silicon shield’

The report also highlights sustained efforts to infiltrate Taiwan’s semiconductor industry, a cornerstone of the island’s economy and global supply chains.

Science parks hosting major chipmakers have become key targets. Taiwan produces the majority of the world’s most advanced semiconductors, which are essential for consumer electronics, military hardware and artificial intelligence.

According to the bureau, attackers used techniques including man-in-the-middle intrusions and distributed denial-of-service attacks to breach telecommunications networks, with the primary aim of stealing advanced technology.

The activity was described as an attempt to boost China’s technological self-sufficiency and avoid being disadvantaged in the U.S.-China technology rivalry, as Washington tightens export controls on advanced chips.

Beijing’s position

China routinely denies involvement in hacking operations, describing itself as a victim of cyberattacks rather than a perpetrator. The Taiwan Affairs Office did not respond to request for comment regarding the report.

Beijing claims Taiwan as part of its territory and has not ruled out the use of force to assert control. Taiwan’s government rejects that claim, insisting the island’s future can only be decided by its people.

Tags

Taiwan China cyberattacks Hybrid warfare Cross-strait tensions