Updated with U.S. Army statement and updated DJI statement.
The U.S. Army has directed its units to cease using drones manufactured by Shenzhen, China-based DJI out of concern for “cyber vulnerabilities.” The order, contained in an August 2 memorandum, grounds products supplied by the leading manufacturer of small drones and camera systems.
Issued by the Army office of the deputy chief of staff at the Pentagon, the memorandum orders units to “cease all use, uninstall all DJI applications, remove all batteries/storage media from devices, and secure equipment for follow-on direction.”
News service sUAS News posted a copy of the memorandum on its website, and it was widely distributed on social media. The Army did not immediately respond to an AIN request for a copy of the document, so its authenticity could not be confirmed. (After publication of this article, the Army issued the following statement: "We can confirm that guidance was issued; however, we are currently reviewing the guidance and cannot comment further at this time.)
As references for the order, the memorandum lists a classified Army Research Laboratory report on DJI unmanned aircraft system (UAS) “technology threat and user vulnerabilities” and a Navy memorandum regarding operational risks of using DJI products.
The Army’s Aviation Engineering Directorate has issued more than 300 separate airworthiness releases for DJI products in support of multiple organizations, according to the memorandum. “Due to increased awareness of cyber vulnerabilities associated with DJI products, it is directed that the U.S. Army halt use of all DJI products,” the document states. “The guidance applies to all DJI UAS and any system that employs DJI electrical components or software including, but not limited to, flight computers, cameras, radios, batteries, speed controllers, GPS units, handheld control stations, or devices with DJI software applications installed.”
DJI said that it was not notified in advance of the order. The company cautioned against “undue speculation” and said it was reaching out to the Army to confirm the memo and to understand what the service meant by the term “cyber vulnerabilities.”
In a statement, the company said, “People, businesses and governments around the world rely on DJI’s products and technology for a variety of uses, including sensitive and mission critical operations…We are surprised and disappointed to read reports of the U.S. Army’s unprompted restriction on DJI drones as we were not consulted during their decision. We are happy to work directly with any organization, including the U.S. Army, that has concerns about our management of cyber issues.”
On August 7, DJI issued an updated statement that reads in part:
"DJI makes civilian drones for peaceful purposes. They are built for personal and professional use, and are not designed for military uses or constructed to military specifications. We do not market our products for military customers, and if military members choose to buy and use our products as the best way to accomplish their tasks, we have no way of knowing who they are or what they do with them. The U.S. Army has not explained why it suddenly banned the use of DJI drones and components, what 'cyber vulnerabilities' it is concerned about, or whether it has also excluded drones made by other manufacturers.
"If any of our customers have questions or concerns about DJI’s technology, we ask them to contact us directly so we can work to address them."