Skip to main content

CYBERSTATS

Security Intelligence

Home›Topics›Automotive Cybersecurity

Automotive Cybersecurity

Cybersecurity statistics about automotive cybersecurity

Related Topics

EV Charging7Regulation7Attack Vectors6CVEs4CWEs4Pwn2Own3

Top Vendors

PCA Cyber Security57

Showing 41-57 of 57 results

Quarkslab bypassed the 16-byte RH850 debug password protection using voltage fault injection

PCA Cyber Security•5/27/2026•
HardwareFault Injection

Ransomware group exfiltrated nearly 1 TB of data from a major Asian vehicle manufacturer's customer and dealership environment in early January 2026 via a third-party vendor

PCA Cyber Security•5/27/2026•
RansomwareThird-Party Vendor

Delta Alarm cyberattack disabled mobile-app vehicle controls for hundreds of thousands of Russian vehicle owners for up to two weeks in late January 2026

PCA Cyber Security•5/27/2026•
TelematicsCloud Hijack

Delta Alarm took approximately five days to restore partial functionality and nearly two weeks to fully recover from the cloud control plane attack

PCA Cyber Security•5/27/2026•
TelematicsIncident Response

US Commerce Department rule prohibits Chinese and Russian connected-vehicle software starting Model Year 2027

PCA Cyber Security•5/27/2026•
RegulationUS Commerce

US connected vehicle hardware restrictions arrive for Model Year 2030 or January 1, 2029 for non-model-year components

PCA Cyber Security•5/27/2026•
RegulationHardware

US connected vehicle rule covers vehicles under 10,001 pounds

PCA Cyber Security•5/27/2026•
RegulationConnected Vehicles

China's amended Cybersecurity Law took effect on 1 January 2026 (passed 28 October 2025) with raised penalties and extraterritorial reach

PCA Cyber Security•5/27/2026•
RegulationChina

64 distinct CWEs mapped in Q4 2025, down from 82 in Q3 2025

PCA Cyber Security•5/27/2026•
CWEs

Over 100 advertised leaks and ransomware breaches targeted the automotive supply chain on the dark web in Q4 2025

PCA Cyber Security•5/27/2026•
Dark WebRansomware

UK SI 2025/1110 mandates UN R155 and R156 for type-approval effective 13 November 2025

PCA Cyber Security•5/27/2026•
RegulationUNECE R155

EU Delegated Regulation 2025/1455 extends UN R155 to L-category vehicles: new types compliant by 11 December 2027, existing types by 11 June 2029

PCA Cyber Security•5/27/2026•
RegulationEU

ControlLoc adversarial attack on AV object trackers achieved up to 98.5% success digitally and over 79% in physical tests against the Baidu Apollo stack

PCA Cyber Security•5/27/2026•
Autonomous VehiclesAdversarial AI

US Tier-1 automotive supplier had approximately 1.9 TB of internal files publicly posted on an extortion site at the end of October 2025

PCA Cyber Security•5/27/2026•
Tier-1 SupplierExtortion

Japanese vehicle manufacturer's customer management environment breach exfiltrated roughly 900 GB in December 2025

PCA Cyber Security•5/27/2026•
CRM BreachJapan

Japanese vehicle manufacturer third-party cloud compromise exposed around 21,000 customer records in December 2025

PCA Cyber Security•5/27/2026•
Third-Party CloudCRM

German aftermarket parts and distribution business had 1.4 TB of internal data advertised on underground forums in December 2025

PCA Cyber Security•5/27/2026•
AftermarketGermany