Europe Investigates Security Risks from Chinese Electric Buses

Fears over reliance on Chinese technology have emerged in Scandinavia, particularly concerning electric buses manufactured by Yutong, the world's largest bus manufacturer by sales volume. According to NBC News, bus providers in Denmark and Norway are investigating a potential security loophole that allows these buses to receive over-the-air updates, which could also enable remote disabling by the manufacturer or hackers.

Jeppe Gaard, COO of Danish public transport provider Movia, highlights that 262 Yutong buses in Denmark could theoretically be immobilized remotely, raising concerns about cybersecurity and national security.

The alarm was initially raised by Norwegian bus operator Ruter, which has conducted tests revealing that while Yutong buses can be remotely accessed for software updates, Dutch competitor VDL does not share this capability.

Yutong responded by emphasizing its compliance with EU regulations and data protection measures, stating that vehicle data is stored securely in Frankfurt, Germany, and that unauthorized access is prohibited.

The situation illustrates the complexity of Europe's relationship with China, marked by dependency on Chinese trade but also growing concerns about potential cyber aggression. Amidst rising market share for Chinese electric vehicles in Europe, which reportedly doubled to five point one percent in the first half of 2025, security experts, including former MI6 head Richard Dearlove, express alarm over the implications of such technology being susceptible to remote control.

Experts warn that this is not only a concern for electric buses but extends to all connected vehicles, as they can be similarly immobilized. In Norway, Ruter has begun implementing stricter controls on future bus purchases and enhancing cybersecurity measures, yet skepticism remains about the effectiveness of these responses.

Ken Munro, a cybersecurity consultant, pointed out that while connectivity is essential for modern vehicles, it inherently increases vulnerability. The overarching question is whether China would risk its export industry by exploiting these vulnerabilities, a possibility that some experts deem unlikely but still raises significant concerns about trust and security in technology.