A student breaches the TETRA high-speed train communications system
A university student managed to hack into Taiwan's TETRA communications system, disrupting service on several trains across the island by activating emergency brakes. He was arrested, highlighting the vulnerability of these systems and the potential for similar exploitation elsewhere.
According to local news station New Talk, and as reported by international media outlets such as Bleeping Computer, the student tampered with the TETRA communications system used in Taiwan's high-speed rail network, known as THSR.
Taiwan's high-speed rail line runs north to south along the island's west coast, connecting Taipei and Kaohsiung, passing through cities like Taichung. It's a modern, fast, and punctual rail network. At Redzone, we were able to use this particular line last February and confirmed that it does indeed reach speeds exceeding 300 km/h.
According to reports in local media outlets, such as New Talk, the incident occurred on April 5, causing a 48-minute delay for four trains. The student used software-defined radio communication technology and handheld radios, enabling him to send a high-priority general alert signal and activate the emergency braking system.
But how did a 23-year-old, along with a 21-year-old accomplice, manage to do this? Reports indicate that the system had been in operation for 19 years and used standards that hadn't been updated during that time. This allowed the attacker to bypass up to seven layers of verification.
Taiwan's high-speed rail company, THSR, has been investigating the incident for weeks and has determined that the signal originated from a radio transmitter not designated for any specific function. No device was stolen; rather, an unauthorized cloning operation took place.
After reviewing CCTV footage and TETRA network records, police were able to locate the suspect's home. There, they found 11 portable radios, a software-defined radio receiver, and a laptop—everything this student needed to disrupt train traffic in Taiwan.
The student now faces up to 10 years in prison under Taiwanese law, in addition to a hefty fine. This has sparked widespread public criticism, with many considering it a serious problem that a student could disrupt train traffic. They are also demanding that politicians hold those responsible accountable to prevent a recurrence of such an incident.
In short, a young man managed to disrupt Taiwan's main railway line and one of its most prominent features, the THSR train, for approximately an hour. This demonstrates the vulnerability of these systems and the importance of constantly reviewing and updating protocols.