The Hidden Cybersecurity Risks of the EV Charging Ecosystem – A Critical Look

As electric vehicles become a staple of sustainable mobility, the infrastructure supporting them—particularly EV charging stations—is growing rapidly to meet demand. However, these charging networks are increasingly becoming a vulnerable entry point for cybercriminals, threatening critical infrastructure and the long-term adoption and safety of sustainable mobility.

A Gateway to Attacks on Critical Infrastructure

EV charging stations are not just plug-in points to power up vehicles—they are interconnected IoT devices that can be exploited by malicious actors. A compromised charging station can serve as a conduit for attacks on entire networks, vehicles, and even power grids. Malicious code execution and vehicle malware infections are just a few of the emerging threats. Worse yet, these vulnerabilities can be leveraged to destabilize power grids, creating artificial demand spikes that can result in blackouts or service disruptions.

Recent incidents highlight the urgency of addressing security gaps in EV infrastructure:

February 2024: The UK suspended sales of Spanish EV chargers due to cybersecurity concerns, raising alarms about potential threats to national energy security.

April 2024: Researchers discovered six zero-day vulnerabilities in the Open Charge Point Protocol (OCPP), exposing weaknesses in backend communications across multiple EV charging management systems.

August 2024: The US government launched a cybersecurity initiative aimed at protecting clean energy systems, with a specific focus on securing EV charging infrastructure and the national power grid.

November 2024: A data breach compromised 116,000 records from global EV charging networks, highlighting the severe risks posed by inadequate security measures.

EV charging infrastructure is critical infrastructure that must be secured against cyber threats. Without robust security, charging stations become prime targets for hackers, leading to operational disruptions, compromised personal data, and large-scale grid failures. Strengthening cybersecurity for EV charging is not just about protecting EV users—it’s about ensuring the stability of energy infrastructure and the adoption of sustainable mobility.

Explore the trends and risks impacting the automotive and smart mobility industry in Upstream’s 2025 Global Automotive Cybersecurity Report, and deepen your understanding of the threats impacting the EV charging ecosystem.

Newsletter Icon

Subscribe
to our newsletter

Stay up-to-date on the latest trends, emerging risks, and updates

Upstream Named Top-10 European Mobility Startup

Selected from over 500 companies, Upstream was recently named one of the Top 10 startups in the European Startup Prize for Mobility. Representing us on…

More Details

The After-Sales Quality Playbook: AI in Action

Explore how AI is solving real after-sales quality challenges in automotive. Learn from OEM experts about early detection, RCA, and boosting customer satisfaction

More Details

Unlock the True ROI of Connected Vehicle Data

A decade ago, the value of connected vehicle data was associated with new revenue streams for OEMs. Fast forward to today, a more effective and…

More Details

[JP] タイトル – Upstreamの2025年グローバルオートモーティブサイバーセキュリティレポート

UNECE WP.29 R155への準拠と2024年のマイルストーンは、規制順守にスポットライトを当てた一方で、誤った安心感を醸成することにも繋がった。

More Details

タイトル – Upstreamの2025年グローバルオートモーティブサイバーセキュリティレポート

UNECE WP.29 R155への準拠と2024年のマイルストーンは、規制順守にスポットライトを当てた一方で、誤った安心感を醸成することにも繋がった。

More Details

Cisco and Upstream collaboration sets new standard for connected vehicle security

Upstream CEO Yoav Levy and Cisco’s Senior Director Mobile Architecture & Ecosystem Bob Everson, recorded this video at Mobile World Congress to announce Upstream’s collaboration…

More Details
Skip to content