UK and other businesses launch investigation into Chinese-made electric buses that could be remotely controlled



An investigation by a Norwegian bus operator has revealed a security risk in electric buses manufactured by Chinese bus manufacturer Yutong, which could allow unauthorized access via the SIM card installed in the bus. In response to this incident, operators of Yutong buses in other countries, including the UK, have launched emergency investigations.

UK investigates whether buses made in China can be turned off from afar

https://www.ft.com/content/07ecb1c0-d4c0-476c-be5b-651e8feb4de1

Chinese-made electric buses on Australian roads spark cybersecurity concerns after Norway flags issue - ABC News
https://www.abc.net.au/news/2025-11-07/chinese-electric-buses-in-australia-spark-security-concerns/105982738

China electric buses: Denmark, Norway investigate security loophole
https://www.nbcnews.com/world/europe/china-electric-buses-denmark-norway-investigate-security-loophole-rcna242054

An investigation by Norwegian transport operator Ruter found that the power management system of Yutong electric buses could be accessed from outside via the SIM card. Ruter modified the buses to operate locally by disconnecting communications or removing the SIM card as needed.

Chinese-made electric buses operating in Norway discovered to have hidden remote access functionality - GIGAZINE



Following Ruter's report, several operators in Denmark and the UK have also begun investigations. According to the Financial Times, in the UK, operators such as Stagecoach and First operate around 700 Yutong electric buses, mainly in Nottingham, South Wales and Glasgow.

The UK's Department for Transport said: 'We are investigating this matter and working closely with the National Cyber Security Centre to understand the technical basis for the measures taken by the Norwegian and Danish authorities.'

To expand into the UK market, Yutong is also developing a double-decker electric bus that meets Transport for London's standards. However, Transport for London stated that 'buses operating within the city must meet strict technical requirements, including rigorous testing,' and explained that there are no cases of Yutong's electric buses being introduced.

Electric Double Becker & City Sightseeing Bus-Yutong

https://en.yutong.com/products/U11DD.shtml



In Australia, Yutong electric buses are in operation in several states, territories, and cities, including the capital, Canberra. VDI, which sells Yutong buses in Australia, has installed over 100 of them, but emphasized that there are no security issues, saying, 'In Australia, software updates are typically performed at a service center, not remotely.'

However, security expert Alastair McGibbon, former director of the Cyber Security Centre, told ABC News that connected cars need to be able to continuously connect to the internet with their manufacturers for software and firmware updates, and that the issue here isn't so much that it's a 'Chinese-made bus,' but that 'China-based companies are operating under the direction of the Chinese Communist Party.'

In response to these concerns, Yutong explained that 'our vehicles strictly comply with applicable laws, regulations and industry standards where they are used,' and that 'we always prioritize the security of vehicle data and protecting customer privacy.'

in Vehicle,   Security, Posted by logc_nt