Europe's Security Concerns Rise Over Chinese Electric Buses

Fears over dependency on Chinese technology have reached an unlikely corner of the West: the Scandinavian public transportation sector. European nations are increasingly concerned about the potential weaponization of Chinese-built infrastructure, which they fear could be tampered with, immobilized, or commandeered if tensions with Beijing escalate.

In Denmark, bus providers have revealed they are investigating a security loophole involving their fleets of electric buses manufactured by Yutong, the world's largest bus manufacturer by sales volume.

The COO of Movia, Jeppe Gaard, stated that these buses can receive over-the-air updates, making them susceptible to remote deactivation by hackers or the manufacturer. Movia operates a fleet of 262 Yutong buses deployed since 2019 across Copenhagen and eastern Denmark.

In Norway, the bus operator Ruter, which runs half of the country’s public transport, raised alarms after conducting tests on Yutong models. They discovered that, unlike buses from the Dutch manufacturer VDL, Yutong buses have direct digital access for software updates, which theoretically allows for remote immobilization.

Yutong responded by emphasizing its commitment to vehicle safety and data privacy, asserting that its data in the EU is stored securely in Germany and cannot be accessed without customer authorization.

This incident underscores Europe's complex relationship with China, which is marked by reliance on Chinese trade and technology amidst rising concerns over cyber aggression and human rights violations.

The report also highlights the broader issue of security vulnerabilities associated with Chinese electric vehicles, which are gaining market share in Europe as U.S. markets largely block them. Former MI6 head Richard Dearlove expressed concerns that these vehicles could be remotely reprogrammed during a crisis, potentially paralyzing critical infrastructure.

Cybersecurity expert Ken Munro noted that any vehicle with internet connectivity could face similar vulnerabilities. In response to these concerns, Norwegian authorities are implementing stricter controls on future bus purchases and collaborating on cybersecurity requirements.

However, Munro expressed skepticism about whether these measures would be sufficient, emphasizing the inherent risks associated with connectivity. The ongoing situation reflects a growing apprehension in Europe about the implications of Chinese technology on national security, as countries grapple with balancing technological advancement against potential vulnerabilities.

This situation is part of a larger narrative of European nations reassessing their dependencies on Chinese infrastructure following previous incidents involving Huawei and 5G networks. The dynamics are evolving as Europe continues to navigate its trade relationships with China while addressing security concerns.