Ransomware Hits the Open Road

A new report reveals that ransomware attacks on connected vehicles doubled in 2025, fueled by AI and vulnerabilities in cloud infrastructure

16 Mar 2026

The automotive industry is facing a cybersecurity reckoning. According to the 2026 Upstream report, ransomware attacks on connected vehicles and smart mobility systems more than doubled over the past year. These incidents now account for 44% of all automotive cyber threats, a staggering leap that has left manufacturers scrambling to patch digital holes.

Artificial intelligence is the primary engine behind this surge. Organized criminal groups are leveraging AI to scout supply chain weaknesses and launch automated strikes at a pace that traditional defenses simply cannot match. This creates a dangerous gap between the sophisticated tools of the attackers and the aging security postures of many global automakers.

The battlefield has moved from the driveway to the cloud. Roughly 92% of these attacks are executed remotely, bypassing the physical car to strike at telematics platforms and companion apps instead. In one chilling 2025 case, hackers hijacked a vehicle’s remote command system, locking the owner out and demanding a digital ransom just to engage the ignition.

Systemic risks are also scaling up alongside the technology. Over 60% of recorded incidents had the potential to compromise thousands of vehicles simultaneously, turning a localized glitch into a fleet-wide crisis. As software-defined vehicles become the industry standard, the margin for error is shrinking.

In response, the industry is pivotally shifting toward continuous monitoring and AI-powered defense layers. Manufacturers are finally embedding cybersecurity into the earliest stages of design rather than treating it as an afterthought. Whether these new architectures can outpace the hackers remains the most expensive question in the mobile world.