Chinese cyberattacks targeting Taiwan’s critical infrastructure, including hospitals and banks, increased by six percent compared to the previous year, averaging 2.63 million attacks per day, according to Taiwan’s National Security Bureau. Some of these attacks were coordinated with military drills, forming part of so-called “hybrid threats” aimed at crippling the island.

Taiwan has repeatedly raised concerns about what it views as China’s “hybrid warfare,” which combines daily military maneuvers near the island, disinformation campaigns, and cyberattacks, as Beijing intensifies political and military pressure to assert its sovereignty claims over the democratically governed island.

The bureau reported that the daily average of cyberattacks in 2025 rose 113 percent from 2023, the first year such data was published. The energy, emergency response, and healthcare sectors experienced the steepest increases. “This trend reflects a deliberate effort by China to undermine Taiwan’s critical infrastructure and disrupt governmental and societal functions,” the report said.

According to the bureau, China’s cyber operations were often timed to coincide with military and political actions. For instance, during 40 “joint combat readiness patrols” by Chinese military planes and ships near Taiwan, cyberattacks intensified on 23 occasions. Hacking activity also surged during politically sensitive events, such as President Lai Ching-te’s first-year speech in May and Vice President Hsiao Bi-khim’s address at the European Parliament in November.

The report concluded that China’s actions reflect a strategic approach to employ hybrid threats against Taiwan during both peacetime and potential conflict. China’s Taiwan Affairs Office did not comment on the report, while Beijing generally denies involvement in cyberattacks. China claims Taiwan as part of its territory and has not ruled out using force to assert control, whereas Taipei maintains that only its people can determine the island’s future.

The report detailed that Chinese attacks included distributed denial-of-service (DDoS) campaigns to disrupt daily operations and man-in-the-middle attacks to steal data and infiltrate Taiwan’s telecommunications networks. Science parks supporting the semiconductor industry, including firms like TSMC, were frequent targets, with attackers seeking to acquire advanced technologies. The report suggested these efforts aimed to bolster China’s technological self-reliance and economic growth, while preventing disadvantages in the US-China technology rivalry.