European governments investigate remote control risks in Chinese AI-enabled electric buses
European governments including the UK, Norway and Denmark have launched investigations into Yutong electric buses after discovering remote access capabilities to vehicle control systems. The findings, initially reported by Norwegian transit operator Ruter, raised concerns about potential remote disabling of buses and prompted security inquiries among multiple governments.
What happened
Norway's public transport company Ruter discovered that Yutong buses had remote access capability to battery and power management systems, and reported that Yutong could theoretically stop or prevent buses from starting.
Following Norway's findings, Denmark's largest public transport company Movia investigated and confirmed similar remote software update and diagnostic access capabilities in Yutong buses.
The UK Department for Transport and National Cyber Security Centre launched an investigation into approximately 700 Yutong buses deployed in Nottingham, South Wales and Glasgow to determine if remote control of vehicle systems was possible.
Reported impact
Yutong buses deployed in the UK, Norway and Denmark were found to have remote access to critical vehicle control systems, raising concerns about potential remote disabling of buses during operation.
The findings prompted political concern in the UK, with lawmakers urging the government to assess security risks from Chinese electric vehicle imports, citing national security implications.
Index analysis
Movia noted that remote software update capability is not unique to Chinese buses, as many electric vehicles including Western-made models have similar functionality.
The US Commerce Department had previously banned import and sale of connected Chinese vehicles and related hardware and software due to excessive and unacceptable risks to US national security, with software bans effective from 2027 model year and hardware bans from 2030.
Governance controls
Denmark investigated whether removing SIM cards could prevent remote disabling but opposed this measure as it would also disconnect buses from other system connections.
Taiwan's Department of Transportation requires that electric bus subsidies mandate vehicle information and communication equipment, battery and energy management systems, and automation equipment to prohibit use of Chinese-made products, with manufacturers required to certify compliance.
Classification
Sources and evidence
Sources not yet published
This record was researched and written by the Index from original reporting. Its sources are still being verified by an editor, and they are listed here once that check is complete. Until then the record carries no reviewer.