Transport Canberra currently has 96 Yutong buses in its fleet. Photo: Transport Canberra.
The ACT Government has launched another investigation into its fleet of Chinese-made Yutong electric buses, this time after reports from Europe suggested the vehicles could theoretically be remotely “stopped or rendered inoperable” by the manufacturer.
Transport Canberra confirmed it is working with the local distributor, VDI Australia, and the government’s digital security agency to assess whether recent findings from Norway and Denmark apply to its 96 Yutong buses currently in service.
“Transport Canberra and Digital Canberra have commenced further investigation and are working with the local distributor, VDI Australia, on actively assessing the validity of these reports as it pertains to ACT-owned buses,” an ACT Government spokesperson said.
The ACT Government had to investigate its Yutong buses earlier this year for possible slavery connections. Photo: Transport Canberra.
It’s the second time in less than a year that the ACT Government has had to examine its Yutong buses.
Earlier this year, Transport Canberra began working “closely” with VDI Australia after reports alleged that the batteries used in Yutong’s electric buses could be linked to forced labour in China’s Xinjiang region.
The Yutong E12 buses use batteries made by Contemporary Amperex Technology Co. Limited (CATL) – one of the world’s largest electric vehicle battery suppliers. The company has been accused by a US congressional committee of ties to forced labour in Xinjiang and was later blacklisted by the US Department of Defense over alleged links to the Chinese military.
CATL denied the allegations, calling them “inaccurate and misleading”, saying it had cut ties with the suppliers in question “long ago”.
Following those claims, Transport Canberra said its executives were “working closely” with VDI Australia but had found no evidence of “any incidences of modern slavery involved in its operations and supply chain”.
An independent audit of VDI in February 2025 also failed to detect any actual or suspected cases of modern slavery.
The latest review follows an investigation in Norway, where Oslo’s public transport agency, Ruter, found that Yutong buses could receive “autonomous software updates”, including to key control systems, via an onboard SIM card.
Yutong has said its Australian buses are not the same as those in Norway. Photo: ACT Government.
Ruter said there was no evidence Yutong had ever attempted to control or disable its vehicles, but warned the capability existed in theory.
“This bus can be stopped or rendered inoperable by the manufacturer,” the agency said in its report.
The agency stated that it would tighten its cybersecurity requirements for future bus purchases, while Denmark’s transport authorities launched their own investigation into the same issue.
In response, Yutong said it “strictly complies with the applicable laws, regulations and industry standards” in all countries where it operates, and later told the ABC the model tested in Norway was “not the same model as the Yutong buses operating in Australia”.
Yutong Australia says it has delivered more than 1500 vehicles locally since 2012, including 133 battery-electric low-floor city buses and about a dozen electric coaches.
Canberra’s fleet is part of a 2023 contract for 90 battery-electric Yutong E12 buses, with the first delivered in May 2024.
Canberra’s buses can only receive software updates at the depot, according to Transport Canberra. Photo: Transport Canberra.
A spokesperson for VDI Australia said software updates on Australian buses are carried out manually, not remotely.
“While Yutong vehicles have ‘over-the-air’ capability, VDI’s practice in Australia is to perform vehicle software updates physically at our authorised service centres, with customer consent – not remotely,” the spokesperson said.
Yutong also stressed its commitment to cybersecurity.
“Yutong always prioritises vehicle data security and the protection of customer privacy, and fulfils its commitments to cybersecurity management for vehicles and data protection with high standards,” a company spokesperson said.
Over the border, Transport for NSW told Region it was also “aware of media commentary regarding Yutong electric buses” and continues to work with manufacturers to ensure all vehicles comply with strict cybersecurity standards.
There are currently 26 Yutong battery-electric buses operating under Transport for NSW contracts, with another eight in regional trials.
“Safety is our number one priority,” a Transport for NSW spokesperson said.
“All buses purchased by Transport are required to meet strict Australian Design Rules, relevant safety standards, and Transport’s Bus Procurement Panel specification requirements, which include cyber-security provisions.”
Transport for NSW is trialling eight Yutong buses in regional areas. Photo: Yutong Australia.
Founded in 1963 as the Zhengzhou Bus Repair Factory in China’s Henan province, Yutong has grown into one of the world’s largest bus makers, exporting nearly 110,000 vehicles to more than 100 countries.
For now, Transport Canberra maintains that its fleet remains safe to operate and that all due diligence was completed before it went into operation.
“The ACT Government has mature vulnerability management processes in place across our technology platforms,” its spokesperson said.
“We’re working to ensure the highest possible level of security for our buses and the Canberra community.”
