Student Arrested for Hacking Taiwan High-Speed Rail, Triggering Emergency Brakes
On 12 March 2026, Taiwanese authorities arrested a 23‑year‑old university student for allegedly compromising the TETRA (Terrestrial Trunked Radio) communication network that underpins the Taiwan High Speed Rail (THSR) control system. The suspect, whose name is being withheld pending trial, used a software‑defined radio (SDR) device and custom‑written software to inject rogue commands into the rail’s over‑the‑air (OTA) protocol.
The THSR relies on a TETRA network for voice and data communications between the operations centre and individual train units. The student exploited a known weakness in the TETRA encryption key‑exchange process, allowing him to send unauthenticated emergency‑brake commands to at least three train‑borne TETRA terminals. The rogue commands triggered automatic braking, causing temporary service delays for thousands of passengers while safety checks were performed.
The breach was flagged by the THSR’s intrusion‑detection system, which identified anomalous radio transmissions. The Taiwan Criminal Investigation Bureau (CIB) and the National Police Agency’s Cybercrime Division traced the signals to the suspect’s dormitory, where officers seized a laptop, a HackRF One SDR, and several antennas. In questioning, the student admitted to using the equipment to probe the resilience of the rail network. No injuries were reported, but the incident forced THSR to suspend services on the affected line for approximately 20 minutes.
The case underscores the urgent need for stronger security controls on critical transportation SCADA/ICS systems that still rely on legacy radio protocols such as TETRA. Security experts recommend implementing mutual authentication, upgrading encryption primitives, and deploying continuous monitoring to detect rogue command‑injection attempts. The investigation is ongoing, and the suspect faces charges of unauthorized access, disruption of public transportation, and potential violations of Taiwan’s Cybersecurity Act.