Overview
- Taiwan’s National Security Bureau logged 960,620,609 intrusion attempts in 2025, averaging 2.63 million per day, a 6% increase from 2024.
- The energy sector faced a 1,000% jump in attempts, with probes of industrial control systems and malware planted during software upgrades.
- Emergency rescue agencies and hospitals saw a 54% rise, including ransomware incidents and sales of stolen medical data in at least 20 cases.
- Intrusion peaks aligned with PLA activities, including Dec. 29–Jan. 2 drills that paired influence operations—over 19,000 contentious messages from 799 accounts—with roughly 2.08–2.09 million daily attacks on government networks.
- NSB named BlackTech, Flax Typhoon, Mustang Panda, APT41 and UNC3886, citing tactics such as vulnerability exploitation, DDoS, social engineering and supply-chain compromises targeting telecom, semiconductor and defense suppliers, while coordinating intelligence sharing with 30+ partner countries.