Incoming Mexican President Asked to Review Risks Posed by Chinese Automaker by US Lawmakers
Concerned U.S. lawmakers are seeking Mexican president-elect Claudia Sheinbaum’s attention regarding the Chinese Communist Party’s (CCP) access to Americans through connected vehicles. The lawmakers, led by Rep. Elissa Slotkin (D-Mich.) and Sen. Sherrod Brown (D-Ohio), penned a letter on Oct. 1 urging Sheinbaum to address concerns related to Chinese automakers established in Mexico.
In response to the increasing presence of CCP-linked manufacturers in Mexico, the lawmakers called for a national review to be conducted. They highlighted that modern vehicles come equipped with connectivity features allowing internet access and data transmission. It was noted that the U.S. Commerce Department recently proposed a rule to prevent Chinese software and firmware from being used in cars on American roads.
The lawmakers further requested that Sheinbaum send a Mexican delegation to the United States for further discussions by early 2025.
Amid the Commerce Department’s rulemaking process, carmakers and security experts have contributed to discussions, outlining the intricate supply chain with parts sourced from multiple origins.
Given the substantial number of these connected vehicles in operation, with lifespans exceeding a decade, the national security risks are significant. The CCP is perceived as the primary cybersecurity threat by the United States, as state-sponsored hackers have already engaged in data breaches and ongoing cyber operations.
Brandon Barry, CEO of Block Harbor Security, which provided a risk assessment to the Commerce Department, mentioned that while there have been no reported incidents of CCP hacking into cars, connected vehicles inherently present cybersecurity vulnerabilities.
Officials are apprehensive that these connected vehicles could be utilized for surveillance purposes, including tracking individuals or law enforcement vehicles, disabling entire vehicle fleets, eavesdropping on conversations, intercepting sensor data, and more. Technology experts have cautioned that certain sensor technologies are highly sensitive and capable of providing detailed information, potentially exposing sensitive locations like military bases to foreign adversaries.
Barry advised that the automotive industry enhance cybersecurity measures by adhering to industry standards and implementing an automated and comprehensive risk management system, ensuring supply chain evaluations are conducted.