chicago subway

Lawmakers Warn Cities to Stop Contracting Chinese Companies To Build Transit Systems

Despite concerns about Chinese manufacturers having access to U.S. transportation data, cities continue to move ahead with plans to partner with state-owned companies.

Both Republican and Democratic lawmakers are concerned about the continued partnerships between American cities and Chinese companies to build transit systems, including rail cars and buses.

Those anxieties were aired at a Thursday Senate Banking Committee hearing on the threats posed by state-owned and operated transportation services. Two Chinese companies in particular, the railcar manufacturer China Railway Rolling Stock Corporation (CRRC) and bus and electric battery manufacturer Build Your Dreams (BYD), were the focus of much criticism about the potential security threats to transportation system data.

“The potential for an adversarial state actor to monitor the movements of American citizens, hack personal or government-issued devices, and collect intelligence on our military is a major security concern,” Sen. John Cornyn (R-Texas) said at the hearing, according to The Hill.

Last December, Cornyn was at the center of an effort to ban states or cities from using federal funds to buy passenger rail cars or buses from state-owned or controlled manufacturers. While the bill was signed into law as part of the 2020 National Defense Authorization Act, the law will not go into effect for two years, The Hill reported.

“Unfortunately, special interests were able to demand a two-year enforcement delay of some of this legislation’s critical components,” Cornyn said. “I am here today to ask for your help in ensuring this delay does not turn into a window the Chinese Communist Party and its state-controlled companies can further exploit.”

Cybersecurity and national security officials have expressed similar concerns about Huawei, TikTok and other Chinese companies, which are required by a Chinese law to participate in the country’s intelligence work and disclose sensitive data if asked.

However, many cities -- including Los Angeles, Chicago, Boston and Philadelphia -- are moving ahead with plans to buy from CRRC, the world’s largest manufacturer of metro rail cars. New York’s transit authority said in 2018 that the company had won its bid to build new railcars, offering $50 million of its own money.

A similarly low bid allowed CRRC to win the contest to build railcars for Chicago’s transit system. Sen. Sherrod Brown (D-Ohio) said Chinese subsidies give CRRC and BYD an unfair advantage.

“CRRC and BYD are two in a long line of examples of how China cheats its way ... into being a global leader into industry after industry,” Brown said. “Congress still needs to fully assess the risk associated with data of our transportation system being exposed to foreign actors.”

The two-year delay is not in effect for the Washington Metropolitan Area Transit Authority (WMATA), which is banned from accepting bids from CRRC to build its railcars.

 

For its part, CRRC has said that once the railcars are built and delivered to the transit agencies, the company does not have control over the transportation data. “CRRC is very dedicated and very supportive of the fact that there will be security measures, safety measures and transit agencies will want to be satisfied before they accept a car,” chief legal counsel Marina Popovic told The Hill last year.

Cities must be aware of the potential threats posed by Chinese technology and that the low-balling bids are not worth the security challenges, lawmakers said on Thursday.

“Allowing American trains and buses to become Trojan horses for these technologies on American soil is unacceptable,” Cornyn said.

About the Author

Haley Samsel is an Associate Content Editor for the Infrastructure Solutions Group at 1105 Media.

Featured

  • Maximizing Your Security Budget This Year

    Perimeter Security Standards for Multi-Site Businesses

    When you run or own a business that has multiple locations, it is important to set clear perimeter security standards. By doing this, it allows you to assess and mitigate any potential threats or risks at each site or location efficiently and effectively. Read Now

  • New Research Shows a Continuing Increase in Ransomware Victims

    GuidePoint Security recently announced the release of GuidePoint Research and Intelligence Team’s (GRIT) Q1 2024 Ransomware Report. In addition to revealing a nearly 20% year-over-year increase in the number of ransomware victims, the GRIT Q1 2024 Ransomware Report observes major shifts in the behavioral patterns of ransomware groups following law enforcement activity – including the continued targeting of previously “off-limits” organizations and industries, such as emergency hospitals. Read Now

  • OpenAI's GPT-4 Is Capable of Autonomously Exploiting Zero-Day Vulnerabilities

    According to a new study from four computer scientists at the University of Illinois Urbana-Champaign, OpenAI’s paid chatbot, GPT-4, is capable of autonomously exploiting zero-day vulnerabilities without any human assistance. Read Now

  • Getting in Someone’s Face

    There was a time, not so long ago, when the tradeshow industry must have thought COVID-19 might wipe out face-to-face meetings. It sure seemed that way about three years ago. Read Now

    • Industry Events
    • ISC West

Featured Cybersecurity

Webinars

New Products

  • ComNet CNGE6FX2TX4PoE

    The ComNet cost-efficient CNGE6FX2TX4PoE is a six-port switch that offers four Gbps TX ports that support the IEEE802.3at standard and provide up to 30 watts of PoE to PDs. It also has a dedicated FX/TX combination port as well as a single FX SFP to act as an additional port or an uplink port, giving the user additional options in managing network traffic. The CNGE6FX2TX4PoE is designed for use in unconditioned environments and typically used in perimeter surveillance. 3

  • ResponderLink

    ResponderLink

    Shooter Detection Systems (SDS), an Alarm.com company and a global leader in gunshot detection solutions, has introduced ResponderLink, a groundbreaking new 911 notification service for gunshot events. ResponderLink completes the circle from detection to 911 notification to first responder awareness, giving law enforcement enhanced situational intelligence they urgently need to save lives. Integrating SDS’s proven gunshot detection system with Noonlight’s SendPolice platform, ResponderLink is the first solution to automatically deliver real-time gunshot detection data to 911 call centers and first responders. When shots are detected, the 911 dispatching center, also known as the Public Safety Answering Point or PSAP, is contacted based on the gunfire location, enabling faster initiation of life-saving emergency protocols. 3

  • Luma x20

    Luma x20

    Snap One has announced its popular Luma x20 family of surveillance products now offers even greater security and privacy for home and business owners across the globe by giving them full control over integrators’ system access to view live and recorded video. According to Snap One Product Manager Derek Webb, the new “customer handoff” feature provides enhanced user control after initial installation, allowing the owners to have total privacy while also making it easy to reinstate integrator access when maintenance or assistance is required. This new feature is now available to all Luma x20 users globally. “The Luma x20 family of surveillance solutions provides excellent image and audio capture, and with the new customer handoff feature, it now offers absolute privacy for camera feeds and recordings,” Webb said. “With notifications and integrator access controlled through the powerful OvrC remote system management platform, it’s easy for integrators to give their clients full control of their footage and then to get temporary access from the client for any troubleshooting needs.” 3