MediumII Cyber Warfare & Critical Infrastructure13 October 2026, Tuesday

Chinese software sold as Taiwanese found on foreign ministry computers

Prosecutors searched 10 addresses linked to three companies on 12 October and questioned four people. IP-guard endpoint software from China's Guangzhou Yixin was allegedly packaged as a Taiwanese product and sold to the foreign ministry in 2023–2025 under contracts worth more than NT$20 million.

Location: TAIPEI

According to the Taipei Times, the Taipei District Prosecutors Office is investigating suspected breaches of the Government Procurement Act. During a routine audit in December 2025 the ministry found that part of an IT asset-management package installed on computers at overseas missions was of Chinese origin. The software handles equipment inventory, software-usage monitoring and data-access control. The foreign ministry said on 13 October it had reviewed the past year of logs on every computer where it was installed and found no unusual data transfers.

Sources differ on the companies' roles. Focus Taiwan writes that Kun You Technology changed the interface and marketed the software as Taiwanese-made. The Taipei Times says Ewill Technology altered the interface, a person linked to Information Security Technology Corp arranged the packaging, and Kunyou submitted the bids. The ministry says the computers held no classified diplomatic information. As of 13 October there was no public evidence that the software sent data to China or acted on state direction; the case stands out as the second origin case in two months.

Talay assessment

Bottom line

The weight of the case lies not in a data leak but in showing that origin checks fail for endpoint software too. Together with August's drone-chip case, it shows Chinese components can enter public procurement through relabelling in software just as in hardware. The likeliest path is that Taiwan adds source-code and developer-declaration requirements to public software purchases.

Likely effects

Taiwan public procurementNegative1–6 months
Ministries will have to put existing IT asset and endpoint software through origin checks; replacement tenders and costs rise.
Domestic cyber-security marketPositive6 months+
A source-code declaration requirement lifts demand for security products genuinely developed in Taiwan.
TürkiyeUncertain1–6 months
Türkiye's moves to restrict Chinese software at defence sites face the same verification question raised here: repackaged software can evade origin declarations.

Possibilities, ranked

1
Origin sweep of public software55%
The government searches other ministries for the same software and adds developer declarations to tender specifications.
Watch: A Ministry of Digital Affairs circular on software origin for public bodies
2
Case stays a procurement offence35%
The investigation is confined to breaches of the procurement law, no data transfer is found and the matter closes.
Watch: The Taipei District Prosecutors Office indictment
3
Data transfer found10%
Forensic review shows the software sent data out and the case becomes a national-security investigation.
Watch: Technical findings from the Ministry of Justice Investigation Bureau

Probabilities are calibrated judgement based on the sources, not measurement, and are revised as new information arrives. Not investment advice.

Market reaction

Indicators affected

Contract value (2023–25)▼ > NT$20m
Addresses searched▼ 10