EV’s and National Security Issues

12373112889?profile=RESIZE_400xFollowing fears that Ford’s electric vehicle supply chain may represent a national security issue, concerned legislators are doubling down by outlining the path battery components are required to take vehicles to get here.  Last week, US Rep. Mike Gallagher (R-WI) and Cathy McMorris Rodgers (R-WA) accused Ford of having plans that required contracting technology and software firms with close ties to both the Chinese and North Korean governments.  Rep. Gallagher heads up the House Select Committee on the Chinese Communist Party and McMorris Rodgers serves as the House Energy and Commerce Chair.  They’ve been working together to investigate the Blue Oval’s relationship with Contemporary Amperex Technology (CATL), focusing heavily on the battery supply chain and the business’ governmental ties.[1]

Fox News recently reported that legislators had an opportunity to view some of Ford’s signed agreements with CATL.  The documents reportedly revealed that four Chinese firms "will be intimately involved" in the development, construction, servicing, and information technology processes for the EV battery factory Ford is building in Marshall, Michigan.  While the investigation is primarily driven by the Republicans, concerns about national security has become a bipartisan issue.  However, the Biden administration has bent over backwards to ensure widespread vehicle electrification by 2030 — making the matter harder for some to navigate.

Due to China absolutely dominating in terms of global battery production, there’s almost no way to have domestic EV proliferation without there being some serious industrial overlap.  At this stage, a world of electric cars arguably advantages China more than any other nation.  The Biden administration has sought to counter these concerns by instituting regional content and labor requirements before products were deemed worthy of federal subsidies.  But this has only made Ford’s situation more fraught with peril.

Everyone now seems to be arguing about whether or not the Ford-CATL alliance is even acceptable.  Battery production is indeed being localized.  But it’s requiring additional integration with a company boasting ties to both the Chinese government and its military.  Meanwhile, US regulators continue to debate whether or not the scheme should be eligible for federal funding.  "It is indefensible for Ford to use the same cloud integration and data provider that is linked to North Korean Ministry of Foreign Affairs sanctions evasion activity," Gallagher and McMorris Rodgers wrote to Treasury Secretary Janet Yellen last week.  "Before the Ford plant even comes online, its entire security system could be compromised by this software," they added.  "The same company that is actively supporting the PRC’s surveillance state will have the capability to embed backdoors, spyware, and other forms of malware within Ford’s [cloud service] infrastructure, compromising the confidentiality and integrity of Ford’s sensitive information and posing risk to American’s data privacy rights."

Fox News reported that these lawmakers penned the letter to Yellen after reviewing the signed agreements between Ford and CATL.  They requested that the Department of the Treasury’s Office of Foreign Assets Control investigate possible sanctions evasion activity conducted by the four firms which remain unidentified.

Reps. Gallagher and McMorris Rodgers sent a separate letter to Commerce Secretary Gina Raimondo, asking her agency's Bureau of Industry and Security to investigate the four unnamed software service providers. They specifically asked the agency to consider placing the companies on a list of entities subject to significant US trade restrictions.  "To summarize, a cursory review of publicly available information uncovered the above mentioned companies’ direct ties to the [People's Liberation Army], the CCP, China’s Ministry of Public Security, the ongoing genocide of Uyghur Muslims in Xinjiang, and the North Korean government," they wrote to Raimondo.  And, in a third letter, the Republicans asked Ford President and CEO James Farley to make a relevant company official available for an interview with their committees.

Ford has remained steadfast in its assertion that it is wholly responsible for the project, noting that it’s been trying to help legislators understand this as it intends to fully comply with regulators.  "Beyond legal requirements, Ford suppliers are required to meet our high standards and codes of conducts, including those to protect human rights, and are obligated to extend those requirements to suppliers with whom they might work," a Ford spokesperson stated.  "We welcome any information from any source concerning the integrity of our supply chains and partners."

The above reminds me of a prior investigation that accused Ford, General Motors, Honda, Mercedes-Benz, Stellantis, Tesla, Toyota, and Volkswagen of having benefited from Asian supply chains using forced labor.  It was known that many suppliers based in Xinjiang had been leveraging Uyghurs (an oppressed minority group in China) as free labor.  The Senate Finance Committee launched an investigation in 2023, following years of reporting on the matter, and determined that there were “massive and expanding links between western car brands and Uyghur abuses, in everything from the hood decals and car frames to engine casings, interiors and electronics.”

Automakers gave numerous different responses.  Some said they would immediately look into the matter while others said they had done nothing wrong and that preexisting corporate policies would make such a situation impossible.  A few even said that the issue provided further evidence that supplier ESG compliance needed to be introduced, though that’s another can of worms deserving of a separate article.  But the important takeaway is that the industry is frequently accused of misbehaving and it rarely seems to go anywhere.  We were likewise infrequently afforded irrefutable evidence of the malfeasance, requiring the public to operate on a level of faith that the information they’ve been given is sound.

Things are a little better this time, with the letters outlining the path supply chain resulting in CATL batteries being installed into Ford products.  The company contracted to help develop the batteries on behalf of CATL to be installed at the new Michigan plant likewise designs products for the Chinese military.  Next up is the company tasked with providing the factory’s “Integration Platform as a Service tools and applications,” likely serving as an important IT maintenance entity, has been accused of offering similar services to entities affiliated with helping the North Korean government avoid sanctions.

Meanwhile, the business tasked with providing Ford with Unified Authentication Account software (basically online security) was found to also furnish software services to the Shenyang Institute of Automation, a subordinate institute controlled by the Chinese Academy of Sciences. Like most academic entities in China, it has direct ties to the government.

The final company of concern was said to oversee Ford's Business Process Management software.  But the letter notes that the company has numerous contracts with China’s Ministry of Public Security’s Xinjiang Uyghur Autonomous Region Public Security Department.  As previously mentioned the Uyghur Autonomous Region has repeatedly been accused of serving as an open-air prison for an ethnic minority.  In the letter, House members noted that the entity is currently sanctioned by the Treasury Department over its "ongoing facilitation of the genocide of Uyghur Muslims."

CATL itself also has loads of direct ties to the Chinese Communist Party.  But there aren’t too many large businesses operating within the country where that’s not true.  Most businesses are required by law to have a department devoted to facilitating public-private partnerships, so it’s almost impossible to avoid for Western companies hoping to do business with China.  Frankly, the situation sounds rather dicey in general. Ford has said before that it wants to comply with US regulators.  But it also expressed confusion as to what exactly that would mean as various agencies attempted to decide how things would play out under the expansive EV subsidies introduced (or altered) under the Biden administration.

There’s also a smidgen of hypocrisy involved here.  While being so heavily reliant on Chinese companies should encourage some enhanced scrutiny on the part of regulators, we’ve seen loads of other domestic companies ally themselves with very little pushback from the government.  Loads of American automakers, entertainment studios, and technology companies have all allowed themselves to be intertwined with China and we rarely see them subjected to the same levels of scrutiny.

That’s not to give Ford a pass here.  But it is curious that General Motors spent decades striving to break into the Chinese market and actually manufacturers the Buick Envision there for export into the United States, without receiving the same level of concern.  Ford has also issued plans to import the Lincoln Nautilus from China, with the only real backlash coming from the media.  However, neither issue was framed as a national security risk, but instead as evidence that the US was losing manufacturing jobs to Asia.

Author: Matt Posky

This article is presented at no charge for educational and informational purposes only.

Red Sky Alliance is a Cyber Threat Analysis and Intelligence Service organization.  Call for assistance.  For questions, comments, a demo or assistance, please contact the office directly at 1-844-492-7225, or feedback@redskyalliance.com   

Weekly Cyber Intelligence Briefings:

Reporting: https://www.redskyalliance.org/

Website: https://www.redskyalliance.com/

LinkedIn: https://www.linkedin.com/company/64265941

Weekly Cyber Intelligence Briefings:

REDSHORTS - Weekly Cyber Intelligence Briefings

https://attendee.gotowebinar.com/register/5993554863383553632

[1] https://www.thetruthaboutcars.com/cars/news-blog/investigation-faults-ford-battery-supply-over-national-security-issues-44504929

E-mail me when people leave their comments –

You need to be a member of Red Sky Alliance to add comments!