Markey, Blumenthal Criticize NHTSA on Internet-Connected Cars Cybersecurity

Sens. Ed Markey, Mass., and Richard Blumenthal, Conn., criticized the National Highway Traffic Safety Administration Thursday for its “dangerously reactive approach to cybersecurity" in internet-connected cars. NHTSA “has taken a hands-off approach to the growing threats to public safety from vulnerabilities in internet-connected cars,” the Democrats wrote acting Administrator James Owens. “We also believe that NHTSA is neglecting to oversee and keep the public informed about over-the-air (OTA) software updates designed to fix safety defects in cars without a physical recall.” The senators “are deeply troubled by NHTSA’s deafening silence in response to the repeated reports of vulnerabilities and risks of hacking of internet-connected cars. In your reply to our initial letter, you stated that ‘NHTSA is not aware of any malicious hacking attempts that have created safety concerns for the motoring public.’ However, this statement sets aside the many examples of demonstrated vulnerabilities in cars on the road that have been publicly reported in recent years, and relies on the goodwill of those who have reported these risks.” NHTSA needs to “develop processes that will ensure automakers are publicly accountable for all safety-related defects no matter how they are fixed,” the senators said. The lawmakers sought a response by July 2. NHTSA didn’t comment.