Taiwan High Speed Rail Hit by Radio Signal Spoofing Attack During Qingming Festival During Taiwan’s Qingming Festival holiday, the Taiwan High Speed Rail (THSR) suffered a targeted cyberattack that forced three trains into emergency stops, causing a 48-minute disruption. Authorities confirmed the incident was not a mechanical failure but a deliberate radio signal spoofing attack by a lone threat actor. The attacker exploited a vulnerability in the railway’s operational technology (OT) and communication systems, cloning a high-speed rail radio signal to broadcast a fraudulent General Alarm (GA). The malicious alert, which appeared to originate from a Tetra mobile device restricted hardware issued only to authorized personnel triggered an automated emergency response, forcing nearby trains to halt. Investigators determined the attacker breached the railway’s core network before using specialized broadcasting equipment to impersonate an authorized Tetra device, bypassing safety protocols. After ruling out mechanical failure, equipment theft, and internal error, THSR reported the incident to police on April 6, with a formal complaint filed on April 24. A joint investigation by the Railway Police Bureau and the Criminal Investigation Bureau’s Telecommunications Division traced the attack to a 23-year-old college student. On April 28, authorities raided three locations, seizing electronic devices and wireless broadcasting hardware. The suspect was arrested, released on NT$100,000 bail, and faces charges under the Railway Act and Criminal Code for endangering public transportation and unauthorized system intrusion. The Taoyuan District Prosecutors’ Office warned that future attacks on critical infrastructure will be met with aggressive prosecution to safeguard transit safety.