Colmobil Faces Persistent Operational Delays Following Major Cyber Incident
Colmobil, Israel's largest automotive group, faces ongoing operational delays following a major cyber incident first detected on October 14. The incident highlights regulatory gaps in supply chain security.
Cyberattack Disrupts Operations at Automaker Colmobil
Israel's largest automotive group, Colmobil, is continuing to manage a major cyber incident that was first identified within its computing systems on October 14. Industry sources report that several computerized systems across the company's nationwide dealerships, service garages, and spare parts networks have not yet returned to full operation, resulting in ongoing delays.
Colmobil maintains an advanced cybersecurity apparatus, both internally and through outsourced providers. The entire automotive sector received warnings from the National Cyber Directorate two years ago regarding the potential for widespread cyberattacks, prompting importers to address ongoing threat attempts.
Ministry of Transport Issues Non-Binding Guidelines
Recently, following years of comprehensive work, the Ministry of Transport published a comprehensive set of cybersecurity guidelines for vehicle importers, covering the entire operational chain from garages to corporate computers. However, these guidelines remain non-binding recommendations.
The ministry's document largely relies on two European regulations that mandate manufacturers to manage cybersecurity risks during vehicle production and over-the-air software updates. Consequently, almost every new vehicle imported to Israel with European certification is designed to counter basic cyber threats.
Vulnerabilities in Older Connected Fleets
The core limitation is that these standards only apply to vehicles with European certification sold since July 2024. Numerous smart and connected vehicles currently driving on Israeli roads do not meet these strict standards. The primary innovation in the new transport ministry document attempts to bridge significant cybersecurity gaps in the import and maintenance supply chain, specifically during pre-delivery inspection (PDI) and service garages.
"A cybersecurity information security event was identified by Colmobil's technology team. The company, which is prepared for such incidents, is investigating the source with dedicated teams and has updated the regulatory authorities."
Despite the operational hiccups, Colmobil emphasized that showrooms, customer service, service centers, and vehicle delivery systems for both new and used cars continue to operate, though certain delays are to be expected.
