When Charging Becomes a Threat: The Hidden Risks Behind Europe’s Electric Vehicle Boom

The rapid expansion of electric vehicle (EV) charging infrastructure has brought with it significant vulnerabilities to cyber-physical threats, raising serious concerns about the resilience of both charging systems and the wider smart power grid. A striking example of this growing risk occurred in mid-November 2024, when a major cyberattack exposed approximately 116,000 sensitive records from multiple Charge Point Operators (CPOs) worldwide.

“Initially believed to be limited to the network of a US-based EV original equipment manufacturer (OEM), further investigation revealed that the breach extended to charging infrastructure across several countries, including the United Arab Emirates, Australia, Mexico, Puerto Rico, Guyana, Saudi Arabia, Oman, and India,” says Elad Robb, Director of Cyber Threat Intelligence, in his article EV CPO Under Siege: A New Attack Exposed the Cybersecurity and Privacy Risks of EV Charging Networks.

Such an attack can cause multiple disruptions: payments blocked, charging schedules manipulated, and energy flows to vehicles controlled remotely. Drivers might find themselves stranded mid-journey, unable to charge their vehicles. Border delays could spiral as charging stations fail, directly impacting tourism, trade and logistics. In parallel, cyber interference could destabilise national energy grids, even causing blackouts. The breach of personal data stored within these systems would pose additional dangers, from identity theft to eroded public trust in e-mobility.

Protecting EV charging infrastructure, therefore, goes far beyond securing individual charging stations. It’s about building the resilience of an entire digital ecosystem that underpins Europe’s shift to sustainable transport. The potential for cross-border consequences makes international collaboration not just important—but essential.

Strengthening the Backbone of Green Transport

As EVs continue their rapid expansion across Europe, so too does the complexity of the digital systems supporting them. These charging points are no longer simple plug-in stations; they are sophisticated, networked systems integrated with payment gateways, user databases and national energy infrastructures. And that makes them appealing targets for cybercriminals, state actors and hacktivists alike.

Recognising this emerging threat, the European Union, through the SecurIT project and its Open Calls managed by FundingBox, brought together three innovative small and medium-sized enterprises: Parity Platform and Technomat from Greece, and Grid One Ltd from Croatia, to develop a cybersecurity solution that could meet the challenge head-on.

Parity Platform, are the creators of EV Loader—a platform already managing charging stations across Greece and Cyprus. With their strong background in IoT, EV systems and cybersecurity, Parity served as the technical lead. Technomat, a retail chain with operational charging stations, provided real-world environments for testing and validation. Grid One Ltd, meanwhile, extended the system to work with smart meters and solar controllers in Croatia, illustrating its broader applicability across the energy sector.

The result is EV Safe—a cybersecurity system developed to protect the infrastructure behind electric vehicle charging stations, with flexibility to adapt to different needs.

What Is EV Safe?

EV Safe is a modular suite of interoperable software tools and services that helps charge point operators (CPOs) detect, monitor, and mitigate cyber threats aimed at their infrastructure. Rather than being an off-the-shelf product, it is designed with adaptability in mind, ensuring relevance across different markets and energy systems.

From Simulation to Real-World Resilience

To ensure EV Safe could withstand real-world threats, the project team went beyond theoretical testing. They simulated live cyberattacks on public charging stations, replicating scenarios where attackers might attempt to disrupt or hijack operations. These demonstrations confirmed that EV Safe could not only detect and prevent attacks, but also respond dynamically in real time—minimising disruption and preserving operational integrity.

These simulations played a critical role in validating the system’s effectiveness and maturity. By the end of the project, EV Safe had reached Technology Readiness Level 9 (TRL9)—the highest classification, indicating a system ready for full-scale deployment. It has already been installed in over 50 charging stations, including within a global hotel chain’s network, and Technomat is now offering it as part of their commercial portfolio.

Beyond Funding: Collaboration as a Catalyst

The EV Safe project is more than just a technical achievement. It is a powerful example of how agile, cross-border collaboration can produce tangible outcomes. While the financial support from SecurIT was instrumental, the initiative also offered technical mentorship, business coaching, access to test facilities and a supportive innovation ecosystem.

This collaborative approach enabled the participating SMEs to move swiftly from concept to market-ready product—combining specialist expertise, on-the-ground insight and shared commitment to public good.

Looking Ahead: Securing Tomorrow’s Smart Infrastructure

As Europe advances towards a greener, more digital future, our cities and mobility networks are becoming increasingly connected. With this connectivity comes increased risk—and a growing need for proactive, integrated cybersecurity solutions.

EV Safe demonstrates how thoughtful innovation can anticipate these challenges and offer practical, scalable protection. It’s not just about securing charging points—it’s about ensuring the safe, reliable operation of the infrastructure that will power Europe’s climate ambitions.

By supporting projects like this, the EU is laying the groundwork for a more secure and resilient smart energy ecosystem. Because in the digital age, energy security and cybersecurity go hand in hand.

Weronika Gasior FBOX

 About the authors

Weronika Gasior

EU Project Manager

Communication specialist, with a PhD in applied linguistics and a wide experience of work in an international context. Currently a Project Manager in cascade funding overseeing the execution of Open Calls and all related processes, from the design and customization to the execution and final delivery. Always curious about innovation while also finding strength in tried and proven methods. Personally, a brave extrovert and an advocate for mental health and wellbeing practices through contact with nature.

Urszula Sobek PM at FBOX

About the authors

Urszula Sobek

Senior EU Project Manager

Urszula Sobek is a Senior Project Manager at Fundingbox, specialising in the management of cascade funding projects within the AI domain since joining the company in 2019. A Master of Economy, she has been involved in innovation, IT, R&D, and startup-related projects since 2004, successfully securing over €30 million for external clients.

Ana Martins senior marketing account manager at FundingBox

About the authors

Ana Martins

Senior Marketing Account Manager

As a Senior Marketing Account at FundingBox, I manage a diverse portfolio of AI-focused EC funded projects, such as TALOS, BOOST, Heriforge, StairwAI, ELISE, SecuriT, SMART ERA, dAIEDGE, and I-NERGY. My role spans project Open Call marketing management, communication strategy development, and performance analysis, ensuring that our efforts align with broader project goals. I specialize in creating targeted content strategies and coordinating both digital and offline materials to enhance engagement. My expertise also includes leading email marketing campaigns, paid and non paid social media campaigns, organizing informative webinars to keep stakeholders engaged and others.