UK security review finds Chinese Yutong buses could be remotely disabled via internet connection

Security officials from the Department for Transport and the National Cyber Security Centre have concluded it is technically possible for approximately 700 Yutong electric buses operating in major UK cities to be shut down remotely through their internet connected SIM cards, which are normally used for maintenance and software updates. The review, launched late last year following warnings in Norway about remote access to Yutong bus batteries, found no evidence that such a shutdown has ever occurred. Investigators describe the vulnerability as a potential kill switch scenario.

Why it matters: The finding may influence future procurement decisions for public transport operators evaluating Chinese manufactured electric buses, particularly as cybersecurity becomes a key criterion alongside cost and performance. Operators with existing Yutong fleets may face pressure to implement additional security measures or consider alternative suppliers for fleet expansion.