Upstream Security, a leading provider of cloud-based cybersecurity and data management platforms tailored for the automotive, smart mobility, and IoT ecosystems, has released its 2025 Automotive & Smart Mobility Cybersecurity Report. Now in its seventh year, the report underscores a troubling trend: despite increased regulatory oversight, the frequency, scale, and severity of cyberattacks continue to rise, revealing a false sense of security among industry stakeholders.
The report highlights that in 2024, 60% of cybersecurity incidents within the automotive and smart mobility sectors impacted thousands to millions of assets, including vehicles, electric vehicle (EV) charging stations, smart mobility applications, and connected devices. Alarmingly, incidents affecting millions of vehicles more than tripled, soaring from 5% in 2023 to 19% in 2024. This surge signals an urgent need for companies to adopt cybersecurity measures that go beyond mere regulatory compliance.
“The cybersecurity landscape across the automotive and smart mobility ecosystem is becoming increasingly complex,” said Yoav Levy, CEO and co-founder of Upstream. “Cyber threats are evolving faster than the industry can adapt, outpacing regulation-driven responses. Threat actors are now deploying large-scale, sophisticated, AI-powered attacks targeting not just vehicles but also EV charging infrastructure, API-driven applications, and smart mobility IoT devices. This expanding attack surface demands a transformative, proactive approach to cybersecurity.”
The proliferation of software-defined and autonomous vehicles has introduced new vulnerabilities, widening the cybersecurity gap. The report notes that critical infrastructure elements—including EV chargers and fleet management systems—have expanded the potential attack surface, amplifying risks. Mobility-specific ransomware attacks surged in 2024, causing unprecedented disruptions, with 108 reported ransom attacks and 214 data breaches. One particularly devastating incident in June targeted a major U.S.-based software provider servicing 15,000 automotive dealerships, halting operations for nearly three weeks and resulting in estimated losses of $1.02 billion.
Key findings from the report include:
- Rising Incident Numbers: In 2024, 409 new cybersecurity incidents were recorded, up from 295 in 2023, bringing the total documented cases since 2010 to 1,877.
- Escalation of Ransomware Attacks: A sharp rise in ransomware incidents targeting the mobility sector significantly contributed to the overall increase.
- Data Privacy at Risk: Data and privacy-related incidents accounted for 60% of cases in 2024, marking a 20% increase from the previous year.
- Vehicle System Manipulation: Incidents involving the manipulation and control of vehicle systems surged, accounting for over 35% of all cases.
Cyberattacks in 2024 exhibited greater sophistication, targeting not just vehicles and backend systems but also smart mobility platforms, devices, and applications. Approximately 65% of publicly reported incidents were attributed to black hat actors with malicious intent. Remote attacks dominated, constituting 92% of all incidents, with 85% executed without physical proximity to the targeted assets.
Upstream’s AutoThreat® team actively monitors the deep and dark web for threat activities targeting connected vehicles and mobility infrastructure. The report reveals that 70% of dark web activities had the potential to impact thousands to millions of mobility assets, while over 76% targeted multiple stakeholders globally.
The 2025 report also explores:
- China’s Strategic Automotive Investments: Implications for global cybersecurity dynamics.
- Risks in EV Charging Infrastructure: Emerging vulnerabilities as EV adoption grows.
- Evolving Attack Vectors: Analysis of 2024’s most common cyber threats.
- Regulatory Landscape: The gap between current regulations and real-world cybersecurity needs.
As the industry navigates an era defined by connectivity and automation, the report calls on automakers and mobility stakeholders to adopt holistic, forward-thinking cybersecurity strategies.
Download the full 2025 Upstream Global Automotive & Smart Mobility Cybersecurity Report at https://upstream.auto/reports/global-automotive-cybersecurity-report/