Taiwan
East Asia · capital Taipei · cyber picture, physical security and relations with the EU on one page
Who targets Taiwan
All 22 actors →
China (17) · 
South Korea (1) · 
Russia (1)| Actor | Suspected sponsor | In its news · 30d | Techniques |
|---|---|---|---|
| TraderTraitor named in the news only |  North Korea |
8 | — |
| GhostEmperor named in the news only | China |
1 | 58 |
| UAT-9244 named in the news only | China |
1 | — |
| WIZARD SPIDER | Russia |
— | 64 |
| APT27 | China |
— | 57 |
| Earth Lusca | China |
— | 44 |
| ToddyCat | not attributed | — | 25 |
| DarkHotel | South Korea |
— | 24 |
| APT1 | China |
— | 23 |
| LOTUS PANDA | China |
— | 21 |
| BRONZE HIGHLAND | China |
— | 17 |
| Tonto Team | China |
— | 15 |
Cyber news 30 days
Every cyber article that mentions it →- Never be afraid to ask questions
- Hack affects 8 million records: official
- Hackers use university e-mail for bomb threats
- Hijacked email accounts complicate investigations into European bomb hoaxes
- Citizen Congress Watch: Donation system attacked, personal data may have been leaked, protection measures initiated ZH
- TSMC just had personal data leaked and sold, Synnex also experiences security incident ZH
- SinoPac Bank submits report on security incident today, Financial Supervisory Commission to conduct comprehensive investigation of deficiencies ZH
- Rumor of 46,000 employee personal data leak! TSMC confirms today; Netizens: Even the 'Guardian Mountain' can't be guarded? ZH
- Seven scam syndicates targeting victims overseas busted in Sarawak, 28 foreigners among 42 held
- Ministry of Digital Affairs: AI helps hackers launch cyberattacks, over a dozen companies have 8 million personal data records leaked ZH
Exploited vulnerabilities in its news 90 days
- CVE-2026-109618
- CVE-2026-109619
- CVE-2026-21589
- CVE-2026-0257 Ransomware
- CVE-2026-63077 Ransomware
- CVE-2026-45659 Ransomware
- CVE-2026-59310 Ransomware
- CVE-2025-14733 Ransomware
Incidents
Register →- Moderate 46,000 employee records put up for sale by hackers; TSMC: No evidence of system intrusion Detected
- Moderate Website hacked! Over 70,000 passport photos leaked; Bureau of Consular Affairs: Validity of issued passports unaffected Detected
- High Ministry of Digital Affairs: AI helps hackers launch cyberattacks, over a dozen companies have 8 million personal data records leaked Detected
- Moderate TSMC just had personal data leaked and sold, Synnex also experiences security incident Detected
- Moderate Citizen Congress Watch: Donation system attacked, personal data may have been leaked, protection measures initiated Detected
- Elevated Hack affects 8 million records: official Detected
- Moderate AI used in cyberattacks, some originating in HK Detected
- Moderate 300 Italian Schools Receive "From Taiwan" Bomb Threat Letters, Da-Yeh University Alumnus Account Suspected Hacked Detected
Cyber threat landscape as described in the country report of Nov 12 Machine-generated
Taiwan's cyber landscape was highly active during this period, characterized by a significant volume of data breaches and the increasing sophistication of AI-assisted attacks. The Ministry of Digital Affairs (MODA) disclosed that nearly half of the recent cyberattacks targeting over 10 Taiwanese businesses and online platforms involved artificial intelligence, impacting more than 1 million personal records. These attacks, which compromised names, phone numbers, email addresses, and order details, showed some traffic originating from Hong Kong and utilized ARTEX, a Chinese-developed automated vulnerability scanning tool. Officials noted that AI significantly accelerates the exploitation of security vulnerabilities such as weak passwords and unpatched software.
Notable incidents included the suspension of Din Tai Fung's online shop due to a suspected customer order data leak, leading to targeted scam emails. The Kang Chiao International School's Linkou campus also suffered a ransomware attack, resulting in parents receiving ransom letters and personal data leakage. Furthermore, TSMC confirmed a data leak of 46,000 employee records from a cloud service provider, though its internal systems remained unbreached. Separately, Acronis's Threat Research Unit identified a Taiwan-based individual in Hualien City who used AI agents to steal emergency dispatch records from seven Taipei districts and accessed patient data from a Taipei fire department platform. The government's response includes urging businesses to report breaches within 72 hours and submit improvement plans within one month.
Background: Threat actors known to target Taiwan include WIZARD SPIDER (Russia-linked), APT27 (China-linked), Earth Lusca (China-linked), ToddyCat, DarkHotel (South Korea-linked), APT1 (China-linked), LOTUS PANDA (China-linked), and BRONZE HIGHLAND (China-linked).
Hotspots from the country report of Nov 12
Machine-generated- High Taiwan Strait — Chinese military aircraft and naval vessels frequently cross the median line and conduct exercises, increasing regional tensions.
- Elevated Western Pacific — China is conducting 'area denial' drills with aircraft carriers and naval formations, simulating isolation of Taiwan.
- High Taipei — Multiple cyber incidents, including AI-assisted attacks affecting over a million records, Din Tai Fung data breach, and emergency dispatch records theft, originated or were reported here.
- Elevated Linkou, New Taipei City — Kang Chiao International School campus network was hacked with ransomware, leading to personal data leakage.
- Moderate Hualien City — Identified origin of a Taiwan-based individual using AI agents to conduct cyberattacks against multiple organizations.
- Moderate Milan, Italy — Schools received bomb threats via email, with a suspected link to a hacked Taiwanese university account.
Threat level last reports
Machine-generatedLatest country report
Read the full report →Relations with the EU
Factsheet →Mentioned 10 times in latest briefing. Last updated: 2026-08-22
- 5 EU cooperation projects · 5 active
- 1 EU Digital & ICT project: cyber activity here touches EU digital cooperation
- 1 trade or cooperation agreement on record
EU relations and implications country report of Nov 12
Machine-generatedTaiwan's relations with the European Union during this period were primarily shaped by shared concerns over regional stability and an unusual security incident. The joint declaration by G7 Foreign Ministers, which includes France, Germany, and Italy, explicitly condemned China's increasingly assertive actions in the waters east of Taiwan, stressing the importance of peace and stability across the Taiwan Strait. This aligns with the EU's broader interest in maintaining freedom of navigation and a rules-based international order, reinforcing the existing stable EU-Taiwan relationship outlook (assessed August 2026).
A peculiar incident involved bomb threats sent to hundreds of Italian schools, with a suspected link to a hacked account at a Taiwanese university. While Italian authorities deemed the threats hoaxes, this event highlights a potential avenue for malicious actors to create international friction or exploit cyber vulnerabilities with cross-border implications. Such incidents could necessitate closer EU-Taiwan cooperation on cybercrime investigations and digital security, building upon existing EU digital projects like the EU-Taiwan Semiconductor Cooperation and broader cooperation in trade, investment, energy, education, and ICT.
| Agreement | Type | Budget | Organisation | Period | Status | |
|---|---|---|---|---|---|---|
| EU-Taiwan Trade and Investment Dialogue | Trade & Cooperation | — | Asia-Pacific | 2022 | ACTIVE | Source ↗ |
Previous reports
Machine-generated- Taiwan Security Report — November 11, 2026
- Taiwan Security Report — November 10, 2026
- Taiwan Security Report — November 08, 2026
- Taiwan Security Report — November 05, 2026
- Taiwan Security Report — November 03, 2026
- Taiwan Security Report — November 01, 2026
- Taiwan Security Report — October 30, 2026
- Taiwan Security Report — October 29, 2026
- Taiwan Security Report — October 27, 2026
- Taiwan Security Report — October 26, 2026