Norwegian Home Guard soldiers renting civilian cars for a major drill discovered the vehicles had recorded them, their movements, and security codes for military gates. During Exercise Hovedstad in Oslo from 14–18 September 2026, troops found stored video in the settings of Hertz rental cars. The footage showed soldiers entering and leaving the vehicles, routes, pickup points, time spent at locations, and codes entered at restricted gates. At least some of the cars were Chinese Deepal models. The fleet was supplied by Hertz Norway, whose ownership chain runs through Volvo Cars to China’s Zhejiang Geely Holding Group, Geely’s majority owner. The unit kept using the cars for the rest of the exercise because few alternatives were available. Recordings were later deleted from the vehicles, but it is unclear whether any data left the cars or was transmitted. Modern connected vehicles routinely collect camera, sensor, and location data. When those vehicles are owned or built by companies tied to China and used around sensitive military sites, the result is a clear data-security risk—even without proven remote access in this case. Norway’s forces have acknowledged the issue with electronics in commercial vehicles but rejected a blanket ban as impractical. This is what happens when NATO militaries rely on everyday civilian cars with Chinese ownership links for logistics and drills.