Global Concerns Over Electric Buses Amid Security Risks

Concerns about the security vulnerabilities of electric buses manufactured by the Chinese company Yutong have emerged in Scandinavia, particularly among public transportation providers in Denmark and Norway.

According to NBC News, these countries are investigating potential risks associated with their fleets of Yutong buses, which can receive over-the-air software updates and diagnostics. Jeppe Gaard, the chief operating officer of the Danish public transport provider Movia, highlighted that such connectivity means the buses can theoretically be stopped remotely by either the manufacturer or a hacker.

Movia operates 262 Yutong buses across Copenhagen and eastern Denmark, which have been integrated into their public transport system since 2019. The alarm was first raised by Norwegian bus operator Ruter, which tested both Yutong and Dutch manufacturer VDL buses.

While VDL buses do not support remote software updates, Yutong buses have direct digital access for maintenance purposes. Ruter acknowledged that Yutong buses could be rendered inoperable remotely, raising serious security concerns.

Yutong responded to these concerns by stating their commitment to safety and data privacy, claiming that their vehicle data is stored securely in a German data center operated by Amazon Web Services. The company emphasized that access to this data requires customer authorization.

This situation highlights the complex relationship between Europe and China, where European nations rely heavily on Chinese technology while expressing concerns over cyber-aggression and national security.

European governments have previously dismantled 5G networks from Chinese firms like Huawei and ZTE due to similar fears. As electric vehicles gain popularity, Chinese manufacturers are rapidly increasing their market share in Europe, with reports indicating that their market presence doubled to 5.1% in the first half of 2025.

Security experts have pointed out that the vulnerability identified in Yutong buses reflects broader concerns about the potential for foreign technology to be weaponized. Richard Dearlove, former head of Britain's MI6, warned that in a crisis, manufacturers could immobilize fleets of electric vehicles, bringing major cities to a halt.

Ken Munro, a cybersecurity consultant, echoed these sentiments, stating that any vehicle with internet access poses a risk and questioned whether China would jeopardize its export industry for political purposes.

As a precaution, Ruter has implemented stricter controls on future bus purchases, installed firewalls for cybersecurity, and coordinated with authorities to enhance safety measures.