Apps Blocked Over EV Shutdowns, Focus Turns on Auto Cybersecurity

New Delhi, India Jul 3, 2026 ALN: New Delhi: The Indian government has initiated a comprehensive review of the cybersecurity measures implemented by automakers following the recent blocking of at least three mobile applications that were reportedly being misused to disable certain electric vehicles (EVs). This development underscores growing concerns over the intersection of automotive technology and cybersecurity, particularly as vehicles become increasingly reliant on digital interfaces and connectivity.

The decision to block these applications comes amid rising apprehensions regarding the potential for hacking and other forms of cyberattacks on vehicles. A senior official within the government highlighted the seriousness of the situation, stating, "This is a serious concern....We are looking into safety protocols being put in place by automakers." This indicates a proactive stance by the government, aiming to assess and enhance the security frameworks surrounding not only electric vehicles but also all vehicles equipped with advanced technological features, including driver assistance systems.

As the automotive industry evolves, the integration of technology into vehicles has become more pronounced. Modern vehicles now often feature internet connectivity, advanced driver-assistance systems (ADAS), and various automated functionalities that enhance the driving experience. However, these advancements also introduce new vulnerabilities that can be exploited by malicious actors. The government's focus on cybersecurity is particularly pertinent given the increasing incidents of cyber threats in various sectors, including transportation.

Currently, the vulnerabilities identified by government cybersecurity agencies have been flagged primarily in cheaper electric two- and three-wheelers. These vehicles, which are gaining popularity in India due to their eco-friendliness and cost-effectiveness, may not have the same level of cybersecurity protections as their more expensive counterparts. The official noted, "Government's cybersecurity agencies are closely examining these vulnerabilities," which suggests that there is an ongoing effort to ensure that all segments of the EV market are adequately protected.

Interestingly, while vulnerabilities in two- and three-wheelers have been highlighted, the official also mentioned that no significant concerns regarding electric cars have come to light as of yet. This distinction is crucial, as it indicates that while the government is vigilant about potential threats, the focus at this stage appears to be concentrated on lower-cost models that may be more susceptible to cyber threats.

To address these cybersecurity challenges, the government plans to hold consultations with automakers regarding their cybersecurity safeguards. This collaborative approach aims to foster a dialogue between the government and the automotive industry, allowing for a shared understanding of the risks and potential solutions. Automakers may be required to present updated assessments of their safety protocols, ensuring that they are equipped to handle the evolving landscape of cybersecurity threats.

Multiple ministries are reportedly involved in this exercise, reflecting the multifaceted nature of the issue at hand. The collaboration between different government departments suggests a comprehensive approach to tackling cybersecurity in the automotive sector, as it intersects with various domains, including technology, transportation, and public safety.

Among the applications that were blocked are BAT-BMS, SMART BMS, Lossigy, and Epoch-i-ion. These applications were identified as tools that could be used to remotely disable electric vehicles, raising significant safety concerns. The decision to take down these applications was made following inter-ministerial deliberations, which concluded that each of these apps exposed electric two-wheelers (e2w) and electric three-wheelers (e3w) that had already been sold and could not be individually fixed. This highlights a critical gap in the ability to safeguard consumers after the sale of vehicles equipped with potentially vulnerable technologies.

S Krishnan, the secretary of the Ministry of Electronics and Information Technology (MeitY), confirmed to journalists that there were additional apps that came to light recently, which have also been removed from app stores. He emphasized the responsibility of app store operators in ensuring that such damaging applications do not become available to consumers, stating, "The app stores should exercise due care on these issues." This points to a broader responsibility not only for manufacturers but also for platform providers in maintaining the integrity of the digital ecosystem surrounding automotive technologies.

In India, the predominant mobile operating systems are Google's Android and Apple's iOS, both of which have their respective online marketplaces from which these mobile apps have been deleted following government directives. The removal of these applications from major app stores reflects a significant step in mitigating potential risks associated with the misuse of technology in the automotive sector.

The implications of these developments extend beyond immediate cybersecurity concerns. As the automotive industry continues to embrace digital transformation, the need for robust cybersecurity measures will only grow. This situation serves as a wake-up call for manufacturers, who must prioritize cybersecurity as an integral part of their product development and operational strategies. Failure to do so could not only jeopardize consumer safety but also erode public trust in electric vehicles and the broader automotive sector.

Moreover, as electric vehicles become more mainstream, the government’s proactive measures in addressing cybersecurity will likely set a precedent for other regions grappling with similar challenges. The international automotive landscape is increasingly interconnected, and lessons learned from India’s experience could inform global best practices in automotive cybersecurity.

In conclusion, the Indian government's actions to block certain mobile applications and review automaker cybersecurity protocols underscore the critical importance of safeguarding the automotive sector against cyber threats. As vehicles become more technologically advanced, ensuring the security of these systems will be paramount to protect consumers and maintain confidence in the evolving landscape of transportation technology.