Gary Zhou 
A bug in an Electrify America charger has allowed one person to gain nearly unlimited access, activating concerns of potential hacking vulnerabilities.
As electric vehicle chargers have become an ever more prevalent part of the infrastructure around us, worries about their security have mounted. Potentially the best example of this security risk has been spotted by the Kilowatts, who showed that they had gained access to an Electrify America charger with ease by utilizing a program called TeamViewer.
As seen in the video posted on Twitter this afternoon, the Kilowatts gained what looks to be unrestricted access to an Electrify America charger.
In a second video, it is shown that, through TeamViewer, the charger’s internal computer is essentially completely open, allowing a potential hacker to move the mouse, type, and open programs on the machine.
We reached out to Ryan of The Kilowatts, who believes the vulnerability does open the door for more sinister people to obtain personal information. “Essentially, I could spin up a spoofed EA application that collects personal information through the touchscreen,” he told us. He said he couldn’t access the credit card reader, but others, with perhaps more hacking experience, could.
This could catalyze concerns about customer privacy and security.
This is far from the first time that Electrify America has been criticized for what some claim to be a sub-par charging experience. The company has infamously faced allegations of large numbers of its chargers being inoperable, its charger software being clunky and, in this case, insecure, or even that it has not aggressively enough expanded to offer charging throughout the United States.
Electrify America was not immediately available to comment to Teslarati, nor has the company’s official Twitter account responded to the videos.
Sadly, this bug discovery comes only hours after another Electrify America charger allegedly damaged a vehicle that plugged into it. That issue was found when a Rivian R1T plugged into the charger and could not move after the charger “fried” the truck, according to the vehicle owner. And this follows a string of similar occurrences with other vehicles around the country. Worryingly, Electrify America has not yet responded to this allegation either.
With electric vehicles gaining more computational power and capabilities, such as remote charging payment or even autonomous driving, cybersecurity has become exponentially more important to the auto industry. Along with changes from automakers to make their vehicles safer than ever, the “smart” infrastructure they interact with will also need to become more fortified. It is up to companies like Electrify America to institute these changes and ensure the best EV ownership experience possible.
