The Hidden Cybersecurity Risks of the EV Charging Ecosystem – A Critical Look

As electric vehicles become a staple of sustainable mobility, the infrastructure supporting them—particularly EV charging stations—is growing rapidly to meet demand. However, these charging networks are increasingly becoming a vulnerable entry point for cybercriminals, threatening critical infrastructure and the long-term adoption and safety of sustainable mobility.

A Gateway to Attacks on Critical Infrastructure

EV charging stations are not just plug-in points to power up vehicles—they are interconnected IoT devices that can be exploited by malicious actors. A compromised charging station can serve as a conduit for attacks on entire networks, vehicles, and even power grids. Malicious code execution and vehicle malware infections are just a few of the emerging threats. Worse yet, these vulnerabilities can be leveraged to destabilize power grids, creating artificial demand spikes that can result in blackouts or service disruptions.

Recent incidents highlight the urgency of addressing security gaps in EV infrastructure:

February 2024: The UK suspended sales of Spanish EV chargers due to cybersecurity concerns, raising alarms about potential threats to national energy security.

April 2024: Researchers discovered six zero-day vulnerabilities in the Open Charge Point Protocol (OCPP), exposing weaknesses in backend communications across multiple EV charging management systems.

August 2024: The US government launched a cybersecurity initiative aimed at protecting clean energy systems, with a specific focus on securing EV charging infrastructure and the national power grid.

November 2024: A data breach compromised 116,000 records from global EV charging networks, highlighting the severe risks posed by inadequate security measures.

EV charging infrastructure is critical infrastructure that must be secured against cyber threats. Without robust security, charging stations become prime targets for hackers, leading to operational disruptions, compromised personal data, and large-scale grid failures. Strengthening cybersecurity for EV charging is not just about protecting EV users—it’s about ensuring the stability of energy infrastructure and the adoption of sustainable mobility.

Explore the trends and risks impacting the automotive and smart mobility industry in Upstream’s 2025 Global Automotive Cybersecurity Report, and deepen your understanding of the threats impacting the EV charging ecosystem.

Newsletter Icon

Subscribe
to our newsletter

Stay up-to-date on the latest trends, emerging risks, and updates

Beyond the Cyber Resilience Act: Building
Cyber Resilience for the EV Charging Ecosystem

The CRA places broad obligations on manufacturers, including those who design, develop, or brand charge points, backend systems, and embedded communication software used throughout the…

More Details

Beyond the Cyber Resilience Act: Building Holistic Cyber Resilience

A decade ago, the value of connected vehicle data was associated with new revenue streams for OEMs. Fast forward to today, a more effective and…

More Details

Tech Talk: Securing the Commercial Fleet Ecosystem with IVECO’s CISO

The commercial vehicle industry is undergoing a seismic shift. The convergence of connectivity, electrification, and software-defined vehicles is unlocking unprecedented efficiency but also exposing f

More Details

Unmasking the Blind Spot: Why API Security Is the Weak Link in Automotive Cybersecurity

In this session, recorded during the Auto ISAC Partners Week, Upstream's Dr. Matthias Lenk and Fabian Stahl explain why API security remains a critical yet…

More Details

How AI Helps Detect Vehicle Quality Issues Earlier

Upstream’s Proactive Quality Detection (PQD) in action, accelerating root-cause analysis (RCA), severity analysis and prioritization of quality issues with AI

More Details

After-Sales Quality Report, Zooming in on the Power of AI – Executive Summary

With rapid innovation flooding the Automotive industry, quality strategies must evolve from reactive analytics and proactive detection to support accelerated root-cause analysis and effective counter&

More Details
Skip to content