Taiwan High Speed Rail: Taiwan High Speed Rail Hit by Spoofing Attack That Stops Three Trains

Taiwan High Speed Rail Hit by Radio Signal Spoofing Attack During Qingming Festival

During Taiwan’s Qingming Festival holiday, the Taiwan High Speed Rail (THSR) suffered a targeted cyberattack that forced three trains into emergency stops, causing a 48-minute disruption. Authorities confirmed the incident was not a mechanical failure but a deliberate radio signal spoofing attack by a lone threat actor.

The attacker exploited a vulnerability in the railway’s operational technology (OT) and communication systems, cloning a high-speed rail radio signal to broadcast a fraudulent General Alarm (GA). The malicious alert, which appeared to originate from a Tetra mobile device restricted hardware issued only to authorized personnel triggered an automated emergency response, forcing nearby trains to halt.

Investigators determined the attacker breached the railway’s core network before using specialized broadcasting equipment to impersonate an authorized Tetra device, bypassing safety protocols. After ruling out mechanical failure, equipment theft, and internal error, THSR reported the incident to police on April 6, with a formal complaint filed on April 24.

A joint investigation by the Railway Police Bureau and the Criminal Investigation Bureau’s Telecommunications Division traced the attack to a 23-year-old college student. On April 28, authorities raided three locations, seizing electronic devices and wireless broadcasting hardware. The suspect was arrested, released on NT$100,000 bail, and faces charges under the Railway Act and Criminal Code for endangering public transportation and unauthorized system intrusion.

The Taoyuan District Prosecutors’ Office warned that future attacks on critical infrastructure will be met with aggressive prosecution to safeguard transit safety.

Source: https://gbhackers.com/taiwan-high-speed-rail-hit-by-spoofing-attack/

Taiwan High Speed Rail Corporation. cybersecurity rating report: https://www.rankiteo.com/company/thsrc

"id": "THS1778070612",
"linkid": "thsrc",
"type": "Cyber Attack",
"date": "4/2026",
"severity": "100",
"impact": "7",
"explanation": "Attack that could injure or kill people"

{'affected_entities': [{'industry': 'Transportation',
                        'location': 'Taiwan',
                        'name': 'Taiwan High Speed Rail (THSR)',
                        'type': 'Railway operator'}],
 'attack_vector': 'Exploitation of operational technology (OT) and '
                  'communication systems, cloning of authorized Tetra radio '
                  'signals',
 'date_detected': '2024-04-04',
 'date_publicly_disclosed': '2024-04-06',
 'description': 'During Taiwan’s Qingming Festival holiday, the Taiwan High '
                'Speed Rail (THSR) suffered a targeted cyberattack that forced '
                'three trains into emergency stops, causing a 48-minute '
                'disruption. The attack involved radio signal spoofing to '
                'broadcast a fraudulent General Alarm (GA), triggering an '
                'automated emergency response.',
 'impact': {'brand_reputation_impact': 'Potential reputational damage due to '
                                       'safety concerns',
            'downtime': '48 minutes',
            'operational_impact': 'Three trains forced into emergency stops, '
                                  'service disruption',
            'systems_affected': 'Taiwan High Speed Rail (THSR) operational '
                                'technology and communication systems'},
 'investigation_status': 'Ongoing (suspect arrested, released on bail)',
 'post_incident_analysis': {'root_causes': 'Lack of robust signal '
                                           'authentication for Tetra mobile '
                                           'devices, unauthorized access to '
                                           'core network'},
 'references': [{'source': 'Taiwan High Speed Rail (THSR) public statements'}],
 'regulatory_compliance': {'legal_actions': 'Charges filed for endangering '
                                            'public transportation and '
                                            'unauthorized system intrusion',
                           'regulations_violated': 'Railway Act, Criminal Code '
                                                   '(Taiwan)'},
 'response': {'containment_measures': 'Investigation and seizure of electronic '
                                      'devices and broadcasting hardware',
              'law_enforcement_notified': 'Yes (Railway Police Bureau, '
                                          'Criminal Investigation Bureau’s '
                                          'Telecommunications Division)'},
 'stakeholder_advisories': 'Taoyuan District Prosecutors’ Office warning on '
                           'future attacks on critical infrastructure',
 'threat_actor': 'Lone 23-year-old college student',
 'title': 'Taiwan High Speed Rail Radio Signal Spoofing Attack',
 'type': 'Radio Signal Spoofing',
 'vulnerability_exploited': 'Unauthorized access to Tetra mobile device '
                            'signals, lack of robust signal authentication'}