Cyber Incident Victim: Taipei Mayor's Office
Date:
Apr 2015
Location:
Taiwan
Summary
A computer belonging to the secretary of Taipei's mayor was compromised by a hacker traced to China, resulting in unauthorized access to systems within the mayor's office. The breach targeted specific municipal infrastructure, though full operational impacts remain undisclosed due to restricted incident details.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
On April 14, 2015, Taipei City Government officials disclosed that a computer assigned to the secretary of Taipei Mayor Ko Wen-je had been compromised in a cyberattack. Investigators attributed the intrusion to a hacker operating from China, though the specific attack vector and duration of unauthorized access were not detailed in public statements. The breach targeted a workstation within the mayor's office infrastructure, though the city government did not specify whether other systems or networks were affected. Officials confirmed the incident but did not release technical indicators, malware signatures, or forensic evidence supporting the attribution. No information was provided regarding whether sensitive data was exfiltrated or what operational impacts, if any, resulted from the compromise. The disclosure occurred through a brief announcement by an unnamed city government official to Taiwan's Central News Agency (CNA), with no supplementary technical bulletins or press conferences held.
Taipei City Government initiated an investigation upon detecting the breach, culminating in the attribution to a Chinese-based threat actor. The city did not describe containment measures, remediation steps, or changes to security protocols following the incident. No claims of responsibility by hacker groups or state-affiliated entities were reported in available sources. The announcement emphasized the geopolitical context by highlighting the attacker's origin amid cross-strait tensions but did not link the incident to specific Chinese entities or campaigns. Public reporting remained limited due to CNA's paywalled archive restricting access to the full incident details. The breach underscored vulnerabilities in municipal government systems but yielded no documented disruptions to Taipei's administrative functions or subsequent disclosures of data leaks attributable to this event.