Mounting worries regarding reliance on technology are transforming Europe’s strategy for public transit and digital security. A sector that was previously calm and effective in Scandinavia is now the focal point of an intense discussion concerning national defense and digital autonomy.
Growing concerns regarding Chinese-manufactured buses
Public transportation operators in Denmark and Norway are confronting a potential security flaw in their electric bus fleets, specifically in vehicles produced by Yutong, the world’s largest bus manufacturer based in Zhengzhou, China. The issue stems from the buses’ ability to receive remote software updates and diagnostic checks — a feature that, while technologically advanced, also raises concerns that the vehicles could be immobilized or manipulated from afar.
Movia, Denmark’s leading public transit agency, has acknowledged that this over-the-air functionality could allow a third party — either the manufacturer or a hacker — to remotely disable a bus. Jeppe Gaard, Movia’s chief operating officer, explained that the problem is not unique to Chinese manufacturers but is a broader challenge tied to the increasing digitalization of modern vehicles. Electric cars and buses alike, he noted, rely heavily on online systems that can, in principle, be accessed and deactivated remotely.
Since 2019, Movia has integrated over 260 Yutong buses into its operational fleet for Copenhagen and eastern Denmark. Comparable worries were voiced in Norway, where Ruter, a prominent public transport operator, conducted an independent inquiry. The firm executed controlled evaluations of both Yutong and Dutch-manufactured VDL buses within protected, subterranean facilities. The results indicated that while the Dutch models lacked the functionality for remote updates, Yutong retained direct digital connectivity to its vehicles for software enhancements and diagnostics — implying that, at least hypothetically, the buses could be disabled remotely, despite not being capable of remote driving.
China’s reaction and data security guarantees
Yutong has addressed these allegations by asserting its adherence to global standards and underscoring its dedication to data protection and digital security. The company declared that all vehicle-related data within the European Union is safely stored in an Amazon Web Services data facility situated in Frankfurt, Germany. Yutong additionally guaranteed that all retained information is encrypted, safeguarded by stringent access limitations, and cannot be accessed without explicit customer consent.
Despite these reassurances, European authorities and transit companies remain cautious. The incident has intensified discussions about Europe’s growing dependency on Chinese technology — a relationship characterized by mutual economic benefits but shadowed by deep geopolitical mistrust. Beijing’s alleged involvement in cyber espionage, intellectual property theft, and surveillance activities has led many European leaders to reconsider the long-term implications of their reliance on Chinese suppliers for critical infrastructure.
A broader European dilemma
The examination of Yutong’s buses represents just one recent chapter in Europe’s intricate technological ties with China. Throughout the continent, political leaders are striving to achieve a careful equilibrium: harnessing China’s sophisticated production prowess while simultaneously safeguarding national interests. Recent occurrences, such as the Netherlands’ move to take over the Chinese-owned chip manufacturer Nexperia, have intensified worries that Europe’s automotive and tech industries might encounter significant disturbances should diplomatic or commercial disputes arise.
Many governments have already taken steps to limit exposure to potential vulnerabilities. Several European nations, following the example of the United States, have removed Huawei and ZTE equipment from their 5G networks, citing risks of espionage and data manipulation. Now, attention has shifted to the rapidly growing market for Chinese electric vehicles. According to consultancy JATO Dynamics, Chinese EVs doubled their market share in Europe in early 2025, reaching over 5% — a figure that highlights both consumer interest and regulatory unease.
China, for its part, has dismissed Western fears as unfounded and politically motivated. Earlier this year, a spokesperson for China’s Foreign Ministry criticized U.S. restrictions on Chinese automotive technology, arguing that such measures “overstretch the concept of national security.” Chinese officials maintain that their companies operate transparently and pose no threat to foreign nations.
Western intelligence concerns
Security specialists throughout Europe, however, maintain a degree of skepticism. Richard Dearlove, the former head of MI6, cautioned that Western administrations are confronting a predicament akin to the one presented by Huawei during the deployment of 5G technology. From his perspective, the growing ubiquity of internet-connected automobiles produced by Chinese companies might introduce novel points of weakness. He posited that, under the most dire circumstances, China could hypothetically incapacitate numerous electric vehicle fleets in prominent urban centers — a situation capable of paralyzing transit systems during an emergency.
Still, some cybersecurity experts contend that such a situation, though technically possible, is improbable. Ken Munro, the creator of the Anglo-American company Pen Test Partners, pointed out that any vehicle connected to the internet—regardless of whether it’s manufactured by a Western or Chinese firm—inherently carries dangers of distant manipulation. Even prominent names such as Tesla, he clarified, rely on software connections that could be compromised under particular circumstances.
In light of these worries, Ruter has put in place several safeguards, such as improved cybersecurity measures, firewalls, and more rigorous scrutiny of upcoming vehicle purchases. The organization is also collaborating with national agencies to define more precise cybersecurity guidelines for public transportation networks. Nevertheless, specialists are still split on the adequacy of these preventative steps. Munro warned that the sole guaranteed way to eradicate the danger would be to entirely disconnect vehicles from the internet — an action that would simultaneously impede the capacity to carry out essential updates and remote upkeep.
The intersection of innovation and vulnerability
The debate unfolding in Scandinavia underscores a broader paradox of the digital age: the same technologies that enable efficiency and innovation can also expose systems to new forms of risk. As cities strive to modernize public transport and reduce carbon emissions through electrification, they must also grapple with questions of technological sovereignty, data privacy, and national security.
Europe’s reliance on Chinese-made components and software extends far beyond public transport. From communication networks to renewable energy infrastructure, the continent’s modernization is deeply intertwined with China’s industrial ecosystem. As global tensions rise, the challenge for European nations will be to secure their technological independence without stalling their progress toward sustainability and innovation.
The controversy surrounding Yutong’s buses has made one thing clear: cybersecurity is now as crucial as clean energy in shaping the future of urban mobility. The issue is not confined to any one country or manufacturer — it represents a defining test for the next phase of Europe’s digital transformation.
In the end, as Ken Munro aptly summarized, the debate boils down to one word — trust. And in an increasingly interconnected world, trust may prove to be the most valuable and fragile asset of all.
