Movia report finds no unique cybersecurity risks in Chinese electric buses

A risk assessment conducted by EY for Movia, the public transport authority in the Copenhagen region, found no evidence that electric buses from Chinese manufacturers are less secure than those from other producers. The study evaluated electric buses from seven manufacturers, including Chinese brands Yutong, BYD, and Golden Dragon, alongside European manufacturers such as MAN, Ebusco, Volvo, and VDL.

The investigation was prompted by recommendations from the Danish Agency for Civil Protection (SAMSIK) following previous cybersecurity tests conducted by Ruter in Oslo. While the report concludes that current regulations are sufficient and no specific risks were documented for Chinese-made vehicles, it notes varying levels of maturity in how manufacturers approach cybersecurity.

Movia intends to implement recommendations to further strengthen cybersecurity management during the operation and maintenance phases of the buses.