Taiwan says China's cyberattacks on its hospitals, banks, energy, and other infrastructure rose 6% YoY in 2025 to an average of 2.63M attacks per day
Chinese cyberattacks on Taiwan's key infrastructure from hospitals to banks rose 6% in 2025 from the previous year to an average …
Context & Ripple Effects
Taiwan had already reported that daily attacks on government departments reached 2.4 million in 2024, with most attributed to Chinese cyber forces. The new figure extends that pressure from public agencies to essential-service operators.
The report also fits earlier warnings of a sharp rise in Chinese cyber activity targeting Taiwan and prior allegations that China-linked hackers used information-service providers serving government bodies as an access path.
First-order effects
- Hospitals, banks, energy providers and other named infrastructure operators face a higher reported volume of hostile activity, increasing the immediate burden on their security and incident-response teams.
- Taiwan’s government gains a new public measure of cyber pressure on services whose disruption would carry consequences beyond a single agency or company.
Second-order effects
- Critical-infrastructure operators are likely to scrutinize third-party information-service relationships more closely, since prior reporting linked compromises of such providers to access to government-related data.
- The persistence of activity across government and essential services raises the operational value of coordinated threat sharing between Taiwan’s public sector and infrastructure operators.
Third-order effects
- If this pattern persists, cyber resilience becomes a standing requirement for essential-service delivery rather than a discrete security project, with exposure extending across public agencies, operators and their suppliers.
- The coverage points to sustained cyber pressure as part of cross-strait competition, where reported attack volume can impose defensive costs even when individual attempts do not cause disclosed disruption.
The trend: Taiwan’s reporting reflects a broader shift toward persistent cyber pressure against critical services and the interconnected suppliers that support them.