HighII Cyber Warfare & Critical Infrastructure20 October 2026, Tuesday · 11:15 TRT (UTC+3)
Taiwan logged 185.6 million attacks on its government network in July
Taiwan's government service network is absorbing an average of 2.58 million attacks a day, according to a report the National Security Bureau will present to parliament on 22 October. The bureau does not rule out preparations to interfere in the 28 November local elections.
The report, cited by the Taipei Times on 21 October, says Taiwan's Government Service Network (GSN) took 185.6 million attacks in July, more in that single month than in the whole first quarter. UDN reported on 20 October only that the July figure exceeded 100 million. The two numbers do not conflict, but only the Taipei Times gives a precise total. Attacks average 2.58 million a day, and the surge began in June.
The bureau says the attacks most likely originate in China and may form part of a plan to interfere in the nine-in-one local elections on 28 November. Bureau Director Tsai Ming-yen will present the report to parliament's Foreign Affairs and National Defence Committee on 22 October. In the first half of 2026 the targets were academic institutions, telecoms companies and the defence industry supply chain.
The report's second front is the information space. Suspicious accounts shared 2.5 million pieces of disputed content between January and September, up 48% from 1.69 million a year earlier. Facebook's share of that content rose from 43.6% to 68.9%, and Threads' from 4.5% to 9%. The bureau writes that artificial intelligence is being used at 4 stages, from selecting targets to hunting for zero-day vulnerabilities, flaws that have no patch yet.
An earlier report, cited by Reuters on 5 January 2026, put attacks on critical infrastructure at 2.63 million a day in 2025, up 6% on 2024. The new figure of 2.58 million covers only the government network, so the two series cannot be compared directly.
Talay assessment
Bottom line
The July peak of 185.6 million points to a reconnaissance and preparation phase four months before the vote; the bureau frames it as possible, not confirmed, interference. The real risk is not a network collapse but cyber access merging with information operations before 28 November. Any renewed rise in attack counts over the next 38 days should be read alongside stolen data surfacing through leaks or forged documents.
Likely effects
- Election securityNegativeWeeks
Of the 2.5 million pieces of suspicious content, 68.9% sit on Facebook; platform moderation becomes a point of friction between the Central Election Commission and the companies before 28 November.
- Defence supply chainNegative1–6 months
Defence industry suppliers were targeted in the first half; small subcontractors remain the weak link in joint programmes with the US.
- Semiconductor clustersUncertain1–6 months
The January report named science parks as targets for technology theft; the new wave will push chipmakers to spend more on cybersecurity.
Possibilities, ranked
- 1A high plateau until the vote55%
Daily attacks stay above 2.5 million and information operations intensify without a major service outage.
Watch: The bureau releasing monthly figures for August and September at the 22 October parliamentary session
- 2A visible outage or leak30%
Data from a public agency or a candidate is leaked before the vote, shifting the debate from security to politics.
Watch: A breach notification from a public agency or claims of leaked documents before 28 November
- 3The wave subsides15%
Attacks in September to November stay well below the July peak, suggesting the warning had a deterrent effect.
Watch: The post-election report showing the October–November daily average below 2 million
Probabilities are calibrated judgement based on the sources, not measurement, and are revised as new information arrives. Not investment advice.
Market reaction
Indicators affected
- GSN attacks in July▲ 185.6 million
- Average daily attacks▲ 2.58 million
- Suspicious content, Jan–Sep▲ +48%
Sources
- Taipei Times — China ramps up cyberattacks for potential election meddling: officials
- UDN (United Daily News) — NSB: Chinese cyberattacks topped 100 million in July, suspected election interference ahead of nine-in-one polls
- Yahoo News (Reuters) — Chinese cyberattacks on Taiwan infrastructure averaged 2.6 million a day in 2025