[Auto Moto] Source of data’: are electric cars vulnerable to cyber spies and hackers?

[ThunderStorm.]

 

A sensitive data in the car entertainment and navigation system and most people forget to wipe this after they leave a hire car,” he says. 

Why are Chinese vehicles the focus of concern?

China is a major manufacturer of electric vehicles (EVs) through brands including BYD and XPeng. This, allied with the Chinese state’s use of cyber-espionage, makes those cars a source of potential concern. China’s National Intelligence Law of 2017, for instance, states that all organisations and citizens shall “support, assist and cooperate” with national intelligence efforts.

“Chinese law obliges Chinese companies to cooperate with state security, so one has to assume that if a car is capable of spying on you it may be misused to do so,” says Prof Alan Woodward, a computer security expert at the University of Surrey. There is “no evidence” in the public domain to point to use of Chinese vehicles in such a way, he adds.

However, experts also wonder if China would risk causing serious damage to a key export sector such as EVs by making it a vector for intelligence gathering. Mobile phones, smart watches and other wearable devices are more likely targets for espionage.

What does the UK government say?

A government spokesperson would not comment on specific security measures, but said: “Protecting national security is our top priority and we have strict procedures in place to ensure that government sites and information are appropriately protected.”

A more detailed statement was made last month by the defence minister Lord Coaker, who said the Ministry of Defence (MoD) was “working with other government departments to understand and mitigate any potential threats to national security from vehicles”. He said the work related to all types of vehicle and “not just those manufactured in China”.

Referring to an i report that the MoD had banned EVs with Chinese components from sensitive sites and military training bases, he said there were “no centrally mandated policy restrictions on the movement of Chinese manufactured vehicles”.

However, he said individual defence organisations – a reference to public and private entities – may have stricter EV requirements on certain sites.

BYD has been contacted for comment. XPeng said it was “committed to continuously adhering to and complying with the applicable UK and EU privacy laws and regulations”.

The SMMT, the trade body for UK carmakers and traders, told the i: “All manufacturers with cars on sale in the UK must adhere to relevant regulations on data privacy, and EVs are no different.

“The industry is committed to upholding a high level of customer data protection, including proportionate use of data, including apps and paired mobile phones, which can be removed from cars according to individual manufacturer instructions, giving peace of mind to motorists.”

 

https://www.theguardian.com/environment/2025/apr/29/source-of-data-are-electric-cars-vulnerable-to-cyber-spies-and-hackers