September 2020

Modern vehicles are computer networks on wheels. Million lines of software code, control units and sensor technology enable new mobility concepts, extra comfort and increased driving safety. They are paving the way to automated driving. However, computer networks are constant targets of cyber-attacks and such attacks on vehicles can not only cause financial damage, but also endanger lives.

Hacker attacks on connected ecosystems are anything but an unrealistic possibility. “Alongside the logistics and energy sector, connected cars may become one of the main targets of IT crime,” said Klaus-Peter Röhler, a member of the Management Board of Allianz SE and CEO of Allianz Deutschland AG.

Such risk scenarios and their implications for insurance were discussed by an expert panel consisting of Hans Adlkofer (Vice President Automotive Systems, Infineon Technologies AG), Rico Förster (Head of Commercial Motor, Global P&C, Allianz SE), Prof. Dr. Rudolf Hackenberg (Technical computer science and information security, Ostbayerische Technische Hochschule Regensburg), Jochen Haug (Chief Claims Officer and Member of the Board of Management of Allianz Versicherungs-AG), Prof. Dr. Christoph Krauß (Cyber-Physical Systems and Automotive Security, The Fraunhofer Institute for Secure Information Technology SIT), Dr. Christoph Lauterwasser (Managing Director Allianz Center for Technology) and Conrad Meyer (Digital Forensics, Central Office for Information Technology in the Security Sector, ZITiS)

Due to the current situation around Covid-19, the Allianz Motor Day was held for the first time as a Europe-wide digital press event and the expert panel was broadcasted via online stream. The audience consisting of international press and industry representatives followed the event digitally and there was the possibility to ask questions to the panelists via online form.

A summary of the event and accompanying material (including speeches of the Allianz board members and press releases on the topic) can be accessed via the following link:

https://events.techcast.cloud/en/allianz-deutschland/allianz-autotag

In the context of the event Allianz also published its positions on IT security in connected vehicles, which are summarized here

• To confront cyberchallenges effectively, Allianz is calling for a European solution for a multi-industry Automotive Security Information Center. The center’s primary purpose would be to ensure by pooling of competencies that the mobility ecosystem is able to prepare for, and respond to, security threats, vulnerabilities and incidents, so that everyone involved can best manage their business risks and the risks to customers and third parties.
• Vehicle insurance will cover the consequences of accidents after hacker attacks. But if a vehicle malfunctions and an accident results, the car owner has a right to know whether that was the result of a hacker attack. In addition to the measures called for at the 7th Allianz Motor Day for using vehicle data to investigate accidents in connected and smart cars, future cyberattacks should also be recorded by an independent data trustee. Such records could be kept in compliance with the data protection laws without transmitting personal information. Recording cyberattacks could also serve to develop protective mechanism and avert future damage.
• Vehicle manufacturers are responsible for preventing hacker attacks on their digital platforms that communicate with the vehicle. It’s up to the vehicle manufacturers to ensure that vehicles, and especially their automated systems, work without disruption, and to cover the costs of remedying defects. But Allianz will provide benefits for the consequences of accidents, and also for mere disruptions of function in the event of attacks on an individual vehicle