The electric vehicle (EV) ecosystem consists of an interconnected network of software-defined vehicles, charging stations, EV supply equipment (EVSE), smart grids (OT), and more – all governed by software.
Cyber threats to EV charging infrastructure are of major concern, as attack paths for malicious actors include supply chain vulnerabilities, keyless entry exploits, vehicle-to-grid (V2G) comms, Over-the-Air (OTA) updates, and more.

The risks are further compounded when you factor in IoT and OT attack surfaces and smart grids, which create more complex and interconnected systems vulnerable to exploitation. C2A Security compiled a list of 30 key statistics that encompass the entire EV ecosystem, from market size and future projections to EV vulnerabilities, charging stations, and infrastructure.

Here are 30 EV ecosystem statistics in 2024-2025 and beyond that you should know about.

EV Market Size and Projections for 2025

• The electric vehicle market is estimated at $442 billion in 2024 and has been projected to increase at a CAGR of 14% to reach $1,639 billion by the end of 2034. GlobeNewswire
• Vans and trucks represent 4% of the EV share of sales. Electric Vehicle Outlook 2024
• The global smart grid cyber security market was forecast at $6.4 billion U.S. dollars in 2022, and is expected to grow at a CAGR of approximately 11.5% until 2029. Statista
• Battery-electric cars (BEVs) sold in the European Union are set to reach a total market share of between 20% and 24% by 2025, mostly because of cheaper selling prices. Reuters

EV Vulnerabilities

• Researchers discovered 49 zero-day vulnerabilities, including a two-vulnerability exploit chain in Tesla cars that could allow an attacker to take over the onboard infotainment system. Threat Source Newsletter
• Local vehicle software, including operating systems, Electronic Control Units (ECUs), and Software Bill of Materials (SBOMs), accounted for 40% of disclosed vulnerabilities. Trends in Vehicle Vulnerabilities: A 2023 Report
• A team of security researchers discover over 70 zero-day flaws and net $1M at Pwn2Own Ireland. Infosecurity Magazine
• A Tesla Model 3 was hacked in under 2 minutes at the Pwn2Own Contest, with a cash prize of $100,000. Dark Reading
• A security researcher from Kilowatts was able to expose potential vulnerabilities and security issues in a major EVSE vendor by using TeamViewer. Electrify America bug opens hacking vulnerability concerns [Updated]
• Security researcher demonstrates how anyone can unlock a Tesla by conducting a Man-in-the-Middle (MiTM) phishing attack using a spoofed Wi-Fi network. BleepingComputer: MiTM phishing attack can let attackers unlock and steal a Tesla

EV Charging Stations & Critical Infrastructure

• As of February 2024, there are over 61,000 publicly accessible electric vehicle charging stations with Level 2 or DC Fast chargers in the U.S. Pew Research Center
• 64% of Americans reside within two miles of a public electric vehicle (EV) charging station. Pew Research Center
• The U.S. electric vehicle charging infrastructure market size was valued at USD 5.1 billion in 2024 and is projected to grow at a CAGR of 30% from 2025 to 2030. Grand View Research
• The charging infrastructure market opportunity between today and 2050 in the Economic Transition Scenario is predicted to reach $242 billion. Bloomberg NEF Electric Vehicle Outlook 2024
• Russian charging stations were disabled and attacked during the Ukrainian war in February 2022. Hackers were also able to display inappropriate and vulgar messages. Dark Reading
• Scammers are targeting EV charging stations with quishing attacks (QR + phishing) to steal credit card information. DesignNews
• China had nearly 2.7 million publicly accessible electric vehicle chargers in 2023. Statista
• China has 85% of the world’s fastest charger stations. Is fast charging defining EV adoption worldwide?
• Tesla operates a network of 6,500 Supercharger stations with nearly 60,000 connectors. Wikipedia

The Battery Electric Vehicles (BEV) Market

• “Globally, battery electric vehicles (BEVs) in use are forecast to total almost 62 million units by the end of 2025, an increase of 35% from 2024.” Gartner
• “By 2030, Automakers Will Enable the Recycling of 95% of Batteries from Electric Vehicles.” Gartner
• Outside of big recalls, only 2.5% of EV batteries have been replaced. New Updates: How Long Do Electric Car Batteries Last?
• Direct current fast (DCF) chargers (right) can charge a BEV to 80 percent in under an hour. U.S. Department of Transportation
• Level 1 chargers (the slowest speeds) can take 40-50+ hours to charge a BEV to 80 percent from empty. U.S. Department of Transportation

IoT & OT Security Statistics in Mobility

• A team of seven security researchers discovered critical API vulnerabilities in 16 major car makers. Security Week
• Between 60% and 70% of cars stolen in the UK in the past 12 months were keyless. The cars most likely to be stolen – Which?
• Attacks on telematic and application servers account for 43% of all attacks. Upstream Security 2024 Automotive Cybersecurity Report
• 37% of threat actors targeted multiple OEMs simultaneously (as opposed to impacting a single OEM/auto manufacturer). Upstream Security 2024 Automotive Cybersecurity Report

The Cost of EV & Automotive-Related Breaches

• In 2023, two former Tesla employees were behind a data breach that compromised the PII of more than 75,000 employees. HackerNoon
• The automotive industry lost approximately $944 million in the first three weeks following a major ransomware attack on auto dealership software provider CDK Global. Anderson Economic Group

Empower your Product Security teams with C2A Security

An unpatched vulnerability can serve as an access point for a malicious actor to disrupt a fleet of EV charging stations with a DDoS attack, or even compromise the smart grid through an unsecured endpoint.

C2A Security’s EVSec Platform empowers software-defined companies to develop more secure products and solutions across the entire EV ecosystem. From vulnerability management, asset management, analyzing SBOMs, and context-driven risk management, C2A Security helps product teams to manage their security posture throughout the product lifecycle.

Automate cybersecurity processes and gain visibility over all assets with the EVSec platform.

Schedule a demo today to learn more.