Cars with cameras gain access to sensitive military sites
At least about 190 Chinese connected vehicles, including BYD models, were registered to enter South Korean military facilities, according to People Power Party lawmaker Kang Dae-sik. The sites included the defense ministry, Joint Chiefs of Staff, submarine headquarters and an air base operating F-35 stealth fighters.
Contents
- Cars with cameras gain access to sensitive military sites
- Which facilities were on the registration list?
- What information can a connected car collect?
- A parliamentary visit exposed the rule gap
- Warnings preceded the push for restrictions
- Why the proposed rules extend beyond Chinese brands
- The key question is who controls the data
- Israel shows how access rules can reach military fleets
- Growing ownership makes blanket controls harder
- Key Points
The disclosure has exposed a gap between military security rules and the technology now built into ordinary vehicles. Cars equipped with cameras, microphones, location sensors and internet connections can collect information while carrying their occupants through a base.
South Korea's defense ministry is now pursuing restrictions through an amendment to its defense security directive. At a parliamentary forum, Yoon Hee-beom, the ministry official responsible for security and cryptography, said measures could be introduced before the end of the year if the amendment process moved quickly.
The proposed restrictions would cover connected vehicles regardless of where they were manufactured. Military officials are considering different access levels according to the sensitivity of each facility and the technology fitted to each vehicle.
For people driving to military workplaces, that could eventually mean different entry permissions or parking outside secure areas. The broader policy question is who can collect, access and transmit information gathered inside a military installation.
Which facilities were on the registration list?
Kang, who represents Daegu Dong-gu and Gunwi-eul, identified registrations across the defense ministry and the army, navy and air force. BYD vehicles were registered at Naval Operations Command in Busan, where visiting American aircraft carriers require particularly strict security, and Submarine Command in Jinhae, South Gyeongsang Province.
The list also included the 17th Fighter Wing in Cheongju, North Chungcheong Province, which operates F-35 fighters, and the 16th Fighter Wing in Yecheon, North Gyeongsang Province. The disclosure described the Yecheon facility as having received its first KF-21 fighter the previous month.
Chinese connected vehicles were also reported to have registrations at army headquarters in Gyeryongdae, Ground Operations Command in Yongin and Special Warfare Command. The army did not publicly identify the individual units in its response.
The registrations matter because they give vehicles access to places where military movements, equipment and daily routines are sensitive. The practical security task extends beyond checking the driver: guards and commanders must also consider the recording and communication equipment traveling with that person.
What information can a connected car collect?
A connected car exchanges information through an internet connection. Its sensors can support navigation, parking assistance and automated driving functions, while its software can receive updates from the manufacturer.
The vehicles described in the Korean disclosures can carry around 10 or more cameras, precise GPS positioning equipment, radar and microphones. Some connected vehicles also use lidar, which measures distance with laser light to build a picture of nearby objects.
Inside a secure facility, those systems could capture buildings, routes, nearby equipment or conversations. Location records can also show where a vehicle went and when. Repeated journeys can make routines visible, which is why military security concerns extend beyond a single photograph.
Chinese access to vehicle data is a central concern in the debate, but South Korean officials are moving toward a wider definition of the problem. A vehicle powered by petrol can also have cameras, remote software updates and an internet connection. Its engine type alone tells security officials little about its ability to gather information.
A parliamentary visit exposed the rule gap
Reform Party lawmaker Chun Ha-ram brought the issue directly into parliamentary scrutiny. At the October 7 defense ministry audit during the 2026 inspection cycle, he said he had entered the ministry wearing smart glasses and riding in a Chinese BYD electric vehicle without facing any restriction.
Smart glasses can contain cameras and other recording equipment. Chun's visit put two increasingly familiar consumer technologies into the same security test: a wearable device and a vehicle capable of collecting information around it.
Defense Minister Kang Shin-chul acknowledged that specific entry rules for the devices were absent. He said the ministry was considering institutional restrictions on bringing such equipment into bases, alongside ways to use artificial intelligence to detect information gathering devices and other security threats before entry.
On October 8, Joint Chiefs of Staff Chairman Jin Young-seung told the parliamentary defense committee that he had instructed his staff to examine the issue immediately after hearing the previous day's audit. He promised to review and apply guidance or operating procedures as quickly as possible.
Warnings preceded the push for restrictions
The defense ministry had already discussed the exposure created by vehicle cameras. An April meeting concluded that collecting images of military facilities presented a security vulnerability. A September meeting again addressed the preparation of protective measures.
At the time of Kang Dae-sik's disclosure, the ministry had neither imposed specific connected vehicle entry restrictions nor asked manufacturers for security cooperation. Kang also accused the National Security Office, transport ministry and industry ministry of passing responsibility between themselves when he asked which body should lead the response.
The sequence shows how the issue moved from internal discussion to parliamentary pressure:
- April: A defense ministry meeting identified a vulnerability involving images of military facilities.
- September: Ministry officials discussed preparing security measures.
- October 7, 2026: Chun Ha-ram told a parliamentary audit that he had entered the defense ministry in a BYD vehicle while wearing smart glasses.
- October 8, 2026: Joint Chiefs Chairman Jin Young-seung promised rapid work on guidance.
The subsequent proposal to amend the defense security directive offers an administrative route for changing entry rules. Yoon's explanation was precise: the existing directive contains provisions against vehicles that could expose military protected areas, but it lacks a provision directly controlling connected cars.
Why the proposed rules extend beyond Chinese brands
Yoon said the ministry had asked each service to consider categories reflecting differences in base size and operating conditions. Those assessments would help determine the standards written into the directive.
A system based on categories could distinguish between a highly sensitive military zone and a less restricted part of an installation. It could also distinguish vehicles according to their recording equipment, communications capabilities and other technical features.
Yoon rejected a simple division in which Tesla vehicles were considered safe and Chinese vehicles unsafe. The ministry's approach, he explained, treats the connected car itself as a mobile data platform. Over the longer term, officials are also considering technical measures such as disabling communication modules.
Shin Da-wit, a senior researcher at the Korea Institute for Defense Analyses, argued that American, Korean and Chinese vehicles should all fall within the policy, including vehicles with internal combustion engines. He proposed gradual controls based on vehicle sensitivity and security zones, with options such as separate parking outside restricted areas.
Kim Pil-soo, a professor in Daelim University's future automotive department, favored immediate caution when vehicle systems are difficult to inspect. He also argued that vehicles from allied countries should receive scrutiny. The final access categories, implementation date and technical requirements have not been announced.
The key question is who controls the data
Kim Jun-young, a principal researcher at Seoul National University's Research Institute of Energy and Resources, proposed a Korean certification system focused on control over automotive data. His central point was that the physical location of a server is only part of the security assessment.
A server in South Korea may still be accessible to people or organizations elsewhere. Security officials therefore need to understand who has permission to retrieve data, who can change those permissions and who controls the software handling the information.
Kim recommended expanding existing automotive cybersecurity certification to address those questions. Such a system would examine authority over data alongside the protection of a vehicle's computers and communications.
The European Council on Foreign Relations addresses similar concerns in its vehicle security commentary by distinguished policy fellow Janka Oertel. She argues that control of data flows and software updates connects vehicle technology to national security, cybersecurity and personal privacy. ECFR states that its publications represent their authors' views rather than a collective institutional position.
Oertel recommends transparency requirements for data storage and transfer, consideration of restrictions near military installations and other critical infrastructure, and requirements for manufacturers to demonstrate that Chinese state authorities cannot interfere with data processing. Her commentary also describes a planned European Commission assessment of cybersecurity risks involving connected and automated vehicles.
Israel shows how access rules can reach military fleets
Israel provides a concrete comparison. Its military banned Chinese cars from entering bases earlier in 2025 and subsequently reportedly recalled approximately 700 leased vehicles, mostly Chery Tiggo 8 Pro plug-in hybrids allocated to lieutenant colonels and colonels.
The Israel Defense Forces declined to comment on the reported recall. The vehicles were supplied through a centralized military leasing system and could be used for both official duties and personal travel. Replacing them therefore affects transport arrangements beyond the base gate.
Assaf Orion, a senior researcher at the Institute for National Security Studies who specializes in China, described the risk posed by devices connected to the internet:
Every Internet of Things item, especially EVs, is potentially a collection platform that can be guided and used by the Chinese government.
Glenn Chafetz, director of the 2430 Group, an organization researching state sponsored espionage against the American private sector, focused on the value of linking journeys to identifiable officers:
To know where top military officers are at any given time is gold for intelligence collection.
Cybersecurity specialist Tor Indstoy's Project Lion Cage also reportedly found that roughly 90% of the data generated by the Chinese electric vehicles it examined went to servers in China. His finding adds a technical concern about data destinations to the discussion of cameras, microphones and location tracking.
Growing ownership makes blanket controls harder
Chinese cars are becoming a larger part of civilian transport, making military restrictions more consequential for everyday users. Israel Imported Vehicles Association figures put Chinese brands at 34.1% of new passenger vehicle registrations in the third quarter of 2025, compared with 28.7% in the previous quarter and 22.8% a year earlier.
The increase from 22.8% to 34.1% is 11.3 percentage points in one year. That rapid growth helps explain why Shin, the Korean defense researcher, warned that blanket restrictions could encounter resistance as electric vehicle ownership expands.
Oertel's European analysis identifies a similar tension. Consumers can value Chinese vehicles for their price and quality while governments worry about their connected systems. Changing access rules after people have bought cars directly affects their commuting and purchasing decisions.
South Korea's proposed approach would place the immediate decision at the military gate, using the defense directive to regulate access. People Power Party lawmaker Kim So-hee, who helped organize the parliamentary forum, said ministry restrictions should proceed quickly while broader questions about information and control over data should be addressed through legislation.
The concrete choice now facing military authorities is how to protect sensitive places while maintaining workable transport arrangements. Different access zones, parking outside secure areas and technical controls are all under consideration. Each would require personnel and visitors to know what their vehicles are permitted to do before they arrive.
Key Points
- About 190 or more Chinese connected vehicles were registered for access to South Korean military facilities, according to lawmaker Kang Dae-sik.
- The identified sites included submarine headquarters, Naval Operations Command and air bases associated with F-35 and KF-21 fighters.
- Military leaders acknowledged a gap in specific entry rules for connected cars and smart glasses.
- The defense ministry is pursuing restrictions through an amendment to its security directive, covering connected vehicles regardless of manufacturing country.
- Options include access categories for bases and vehicles, separate parking and technical controls on communications.
- Israel's restrictions and European policy proposals show a wider debate about who can access vehicle data and control software updates.






