BYD Shark Hacked by Cybersecurity Expert; Security Flaws Exposed on September 22

A cybersecurity researcher remotely hacked a BYD Shark 6 during an ABC Four Corners investigation, gaining control of critical vehicle functions with minimal security barriers. The breach exposed how easily Chinese-made EVs, which now represent 40% of Australia’s new car sales, can be compromised. Experts warn the vehicles collect and transmit internal audio, images, and location data, creating national security risks for Australian drivers.

How the BYD Shark was hacked in two weeks

Cybersecurity expert Dan Hreszczuk from Fortify Labs in Canberra spent two weeks testing the BYD Shark 6’s security systems. He found an entry point with no password protection at all. That single weakness gave him access to software controlling many vehicle functions. Hreszczuk said the breach was easier than expected, surprising even a professional car security researcher.

What the hacker could control remotely

Once inside the vehicle’s systems, Hreszczuk demonstrated his access during a real-world test. While ABC reporter Angus Grigg drove the Shark 6 at about 30 km/h on a country road outside Canberra, Hreszczuk remotely locked the doors, turned the music up through the speakers, and displayed random images on the infotainment screen. He also switched wipers on at top speed, sprayed the windscreen with water, and turned headlights on and off. The ease of these actions alarmed security experts.

Why Chinese EVs pose a national security risk

Connected vehicles collect and transmit internal and external images, internal audio, navigation entries, and phone logs, according to Australia’s Cyber Security Centre. Experts warn that data poses a greater risk in the hands of Chinese EV makers because they can be compelled by China’s national security laws to cooperate with authorities. The data collection raises concerns about surveillance and espionage. Chinese-made vehicles now account for 40% of Australia’s new car sales, with EV sales continuing to climb.

BYD’s recall and broader market concerns

BYD issued its first mass recall after spare wheels fell off 32,009 Shark 6 vehicles built between August 2024 and June 2026. The cybersecurity breach compounds concerns about the brand’s quality and safety standards. Security researchers emphasize the vulnerability exposes broader risks in connected car design. Australia’s National Cyber Security Coordinator has flagged concerns about EV security, but the government has not yet implemented strict regulations on Chinese vehicle imports.

Final Thoughts

The BYD Shark hack demonstrates that Chinese EVs dominating Australia’s market lack basic security protections. With Meyka grading BYD a B+ and the stock trading at $72.58, investors should weigh regulatory risk against the company’s strong fundamentals.

FAQs

Disclaimer:

The content shared by Meyka AI PTY LTD is solely for research and informational purposes.  Meyka is not a financial advisory service, and the information provided should not be considered investment or trading advice.