China Blames Taiwan for Cyberattack on Major Tech Firm and Several Intrusions Amid Regional Tensions

• Taiwan's ruling party was accused of backing cyberattacks against an unnamed Chinese company.
• China accuses DPP-backed Taiwanese hacker group of targeting over 1,000 key network systems in recent years.
• The Guangzhou police said the alleged threat actor exfiltrated technology intelligence.

Chinese public security authorities in Guangzhou have formally attributed a recent cyberattack on a prominent technology company to actors allegedly supported by Taiwan’s Democratic Progressive Party (DPP), according to an official statement released on May 27, 2025. 

The Guangzhou police identified the attackers as members of a "foreign hacker organisation" backed by Taiwan’s DPP, which is currently the ruling party on the island. 

Details regarding the targeted company and specifics of the cyber operation remain undisclosed, and so does the name of the threat actor. The Mainland Affairs Council in Taiwan has not yet issued a public response to Beijing’s allegations. 

The Guangzhou police said a Taiwan-backed hacker group frequently conducted cyber attacks in recent years. The alleged hackers reportedly targeted north of 1,000 critical network systems from the military industry, the government, and sectors of energy, hydropower, and transportation across over 10 provincial-level regions.

Chinese Police allegations say hackers exfiltrated “basic information and technical intelligence of relevant systems,” leveraging VPNs, overseas cloud servers, and botnets to hide behind IP addresses from the US, France, the Republic of Korea, and Japan.

This public attribution represents a significant escalation in the longstanding cyber rivalry between China and Taiwan. Both sides routinely accuse each other of cyber espionage, disinformation campaigns, and system intrusions targeting government, infrastructure, and private sector entities. 

Attributions like this, especially via state authorities, are relatively rare, indicating a growing willingness to leverage cyber incidents in the broader context of regional power struggles. The announcement comes at a time when cross-strait relations are already highly strained. 

In March, the U.S. DoJ unsealed indictments that charged 12 Chinese nationals concerning state-sponsored hacks. In April, China accused the NSA and U.S. universities of involvement in February cyberattacks, saying America exploited existing backdoors and targeted several key sectors.