Cybersecurity experts are raising alarms about the potential for electric vehicles to be exploited as surveillance tools, particularly those manufactured in China, according to recent reports from the UK.
British defense firms working with the UK government have reportedly warned staff against connecting their phones to Chinese-made electric cars due to concerns that Beijing could extract sensitive information from their devices. The warning highlights growing security considerations around the increasingly sophisticated technology embedded in modern electric vehicles.
Security specialists interviewed by The Guardian note that electric vehicles are equipped with multiple data collection points, including microphones, cameras, and wireless connectivity features that could potentially be leveraged by malicious actors or hostile states.
“There are lots of opportunities to collect data and therefore lots of opportunities to compromise a vehicle like that,” explains Rafe Pilling, director of threat intelligence at cybersecurity firm Secureworks. He points out that over-the-air update capabilities, which allow manufacturers to remotely update a car’s operating software, could potentially be used to exfiltrate data.
The concerns are particularly focused on individuals in sensitive positions. “If you are an engineer who is working on a sixth-generation fighter jet and you have a work phone that you are connecting to your personal vehicle, you need to be aware that by connecting these devices you could be allowing access to data on your mobile,” warns Joseph Jarnecki, a research fellow at the Royal United Services Institute.
Chinese electric vehicle manufacturers such as BYD and XPeng have drawn particular scrutiny due to China’s National Intelligence Law of 2017, which requires organizations and citizens to cooperate with national intelligence efforts. However, experts also note there is currently no public evidence of Chinese vehicles being used for espionage.
Cybersecurity professionals suggest that concerned drivers can click “don’t trust” when connecting devices to their vehicles, but this sacrifices many convenient features. They also caution against syncing personal devices with rental cars, as this can leave sensitive data in the vehicle’s systems.
The UK government has acknowledged the issue, with Defence Minister Lord Coaker stating they are “working with other government departments to understand and mitigate any potential threats to national security from vehicles.” He emphasized that their work applies to all types of vehicles, not just those manufactured in China.
While the Society of Motor Manufacturers and Traders (SMMT) maintains that all manufacturers selling cars in the UK must adhere to data privacy regulations, the growing integration of connected technologies in electric vehicles continues to raise new security considerations for both government officials and everyday consumers alike.