Chinese Hackers Launch Ongoing Attacks on Taiwan’s Critical Infrastructure

The Taiwan National Security Bureau report documents a sharp rise in coordinated, state-linked cyber operations from China in 2025—averaging 2.63 million intrusion attempts daily—targeting nine critical sectors (energy, healthcare, communications, government, semiconductors, finance, water, transportation, and food). The campaign, attributed to five prominent APT groups, used vulnerability exploitation (including zero-day/n-day), DDoS, social engineering, supply-chain compromises, malware implants and ransomware—resulting in hospital ransomware, theft and sale of medical data, telecom compromises, and supply-chain intrusions aligned with PLA patrols and political events.