Student Arrested for Hacking Taiwan High-Speed Rail Communication System
A university student in Taiwan was arrested for using software-defined radio equipment to impersonate legitimate beacons and trigger emergency brakes on the country's high-speed rail network.
A 23-year-old university student in Taiwan was arrested for orchestrating a cyberattack against the Taiwan High-Speed Rail (THSR) network, successfully triggering emergency braking systems on four trains. The incident, which occurred on April 5, resulted in a 48-minute service disruption across the 350 km line. Authorities apprehended the suspect, identified by the surname Lin, on April 28 following an investigation into unauthorized signal transmissions BleepingComputer.
The attack exploited vulnerabilities in the THSR’s TETRA (Trans-European Trunked Radio) communication system. By utilizing software-defined radio (SDR) equipment purchased online, Lin intercepted and decoded critical radio parameters. These parameters were then programmed into handheld radios to impersonate legitimate network beacons. According to reports, the system had been in operation for 19 years without a rotation of its security parameters, a lapse that allowed the attacker to bypass seven distinct verification layers BleepingComputer.
The impact of the breach was significant, given that the THSR serves approximately 81.8 million passengers annually and operates trains at speeds reaching 300 km/h. By transmitting a high-priority "General Alarm" signal, the attacker forced the trains into emergency stops. A 21-year-old accomplice reportedly assisted the primary suspect by providing essential THSR network parameters that facilitated the impersonation BleepingComputer.
THSR officials identified the breach after reviewing system logs, which revealed that the emergency signal originated from a radio beacon not assigned for active duty. After confirming that no physical equipment had been stolen, investigators concluded that the signal was the result of unauthorized cloning. Police utilized CCTV footage and network logs to track the signal to the suspect's residence, where they seized 11 handheld radios, an SDR, and a laptop BleepingComputer.
Lin is currently facing charges under Article 184 of the Criminal Law, which carries a potential sentence of up to 10 years in prison. While the suspect is currently released on NT$100,000 ($3,280) bail, his legal defense has claimed the transmission was accidental—a narrative that authorities have rejected. The incident has prompted significant criticism from Taiwanese politicians regarding the negligence of the bodies responsible for the railway's security infrastructure BleepingComputer.
This event highlights the persistent risks associated with legacy industrial control and communication systems that lack modern security hygiene, such as periodic credential rotation. As critical infrastructure increasingly relies on digital signaling, the ability of individuals to leverage off-the-shelf SDR equipment to manipulate proprietary networks remains a growing concern for transportation authorities worldwide BleepingComputer.