One Hack Could Put an Entire Electric CV Fleet at Risk, Say Cybersecurity Experts

A cyberattack on a connected electric commercial vehicle could potentially extend beyond a single vehicle and expose an entire fleet, as the growing use of telematics and connected systems creates new cybersecurity risks for fleet operators.

Speaking in Episode 4 of Autocar Professional’s Cybersecurity Dialogues, Karthik Anantha, Head of R&D at Omega Seiki Mobility, and Vikash Choudhary, Founder and CEO of HackersEra, discussed how cybersecurity is becoming increasingly important as electric three-wheelers add connected features.

“For me, a cyberattack is not on a vehicle. When somebody attacks a three-wheeler or another commercial vehicle, it’s on the whole fleet,” the discussion noted, highlighting the possibility of an attack disrupting fleet operations.

Why EV Charging Stations Are a Cybersecurity Risk

The potential attack surface is also expanding beyond the vehicle. Choudhary pointed to charging infrastructure as another area of concern, particularly as chargers increasingly interact with vehicles, data and payment systems. A compromised charging station, he said, could potentially be used to access vehicle data or manipulate charging and payment parameters.

Anantha said awareness around cybersecurity has increased following recent incidents. Omega Seiki Mobility is also looking at how connected systems and future capabilities need to be secured as vehicle connectivity increases.

Automotive Supply Chain Cybersecurity and the AI Threat

The discussion extended to the automotive supply chain, with the two speakers highlighting the need for cybersecurity responsibilities to be defined across OEMs, Tier 1 and Tier 2 suppliers. Choudhary said independent testing is also important, arguing that the organisation developing a product should not be solely responsible for certifying its cybersecurity.

Artificial intelligence could add another dimension. While AI can help companies analyse vehicle data and identify problems, Choudhary said hackers could also use AI to improve their techniques and identify vulnerabilities.

Could a 'Hack NCAP' Rate Vehicle Cybersecurity?

The conversation concluded with the possibility of cybersecurity eventually becoming a vehicle differentiator. With vehicles already subjected to crash tests and safety ratings, the speakers discussed whether the industry could eventually have an independent cybersecurity rating system, or a “Hack NCAP”, to assess how well vehicles withstand cyberattacks.

Watch Episode 4 of Autocar Professional’s Cybersecurity Dialogues.