Secret summer test in Norway
During the summer, the Norwegian transport operator Ruter transported two electric buses to Drammen for a covert test: one European-made bus built in the Netherlands and one new Chinese Yutong bus. The aim was to determine whether the Chinese supplier could exert remote control over buses running on Norwegian routes, according to reporting in Aftenposten.
The results were clear. The European bus could not be remotely interfered with, while the Yutong bus could be remotely stopped, powered off, and receive software updates — updates that in a worst-case scenario could disable systems critical to normal operation.
Yutong buses already in Denmark
Yutong buses run in Denmark as well. Movia currently operates 262 Yutong buses across Danish routes, says Jeppe Gaard, Movia’s traffic director. Movia has acknowledged the Norwegian findings and is reviewing risks across its fleet and operator risk assessments.
Movia has not planned a direct replication of Ruter’s test, but has reached out to the Danish Civil Protection Agency (Styrelsen for Samfundssikkerhed). The agency told Movia that it is not aware of concrete incidents of buses being remotely deactivated, but it warned that modern route buses contain numerous internet-connected systems and sensors that could represent vulnerabilities.
Connectivity vs. security — the trade-off
Norwegian authorities have responded to the findings by removing SIM cards from affected buses to prevent remote activation. Movia recognizes the security benefit of such measures, but also notes that connectivity provides useful services — for example, real-time passenger information about punctuality.
“If we remove web access, we also lose valuable data and functionalities,” said Jeppe Gaard. Movia’s goal, he explains, is to find technical solutions that minimize vulnerability while retaining the advantages of connected systems.
A national-level challenge
Movia stresses that the concern is not limited to buses: it applies to any vehicle using Chinese-built electronic systems. Gaard argues that the issue requires a broader national and regulatory response rather than being solved by individual operators refusing to buy from specific manufacturers.
