An unexpected finding has shaken the Norwegian public transport sector: Some 850 electric buses manufactured by the Chinese company Yutong can be controlled remotely from Chinaaccording to a secret investigation carried out by the transport authority Ruter, responsible for services in Oslo and its surroundings. The case, revealed by , has raised alarm bells regarding imported electric vehicles and their potential vulnerability to external interference.
cIt has more than 1,350 electric buses from China, of which the majority are of the Yutong brand. In a test carried out in an abandoned underground mine, Ruter compared the computer security of different models, both Western and Chinese. The result was overwhelming: while buses from European manufacturers did not present cybersecurity risks, The Yutong were shown to be connected to external systems capable of controlling them remotely.
As detailed in the report cited by Focus, remote access is via an electronic SIM card located in Romania, which acts as a communication bridge with the Chinese manufacturer’s servers. This connection would allow, among other things, to stop a bus in the middle of the route, open or close its doors or block the driver’s access. In addition, the system offers the company full access to diagnostic data, including information on engine operation, energy consumption or possible technical faults.
Ruter reported these findings to the Norwegian Ministry of Transport, which has already announced that will adopt new purchasing protocols for upcoming electric bus contracts. The objective will be to avoid any dependence on external control systems that could put the security or technological sovereignty of the country at risk. ““These discoveries are worrying and should serve as a warning to all European operators that depend on non-EU suppliers,” sources from the organization stated, according to Focus.
The case has revived especially in the context of the growth of connected electric transportation. Digital security experts cited by the newspaper warn that remote connectivity, although useful for maintenance or fleet management, can become an attack vector if access and data management are not limited.
Founded in 1963, Yutong has become one of the largest bus manufacturers in the world, with production that exceeded 41,000 units in 2021 and presence in more than 30 countries. Its international expansion has been rapid, but the Norwegian case could be a blow to the confidence of European operators, who are now looking more cautiously at the implications of depending on technology controlled from outside the European Union.
The Norwegian Government has indicated that, although the buses will continue to operate, network and communication configurations will be reviewed to ensure that no foreign system can manipulate the vehicles or access their data in real time. The investigation, according to Focus, It could be extended to other European countries that have acquired similar fleets.
