We take the issue of Toyota and Lexus vehicle theft very seriously. We are continuously developing technical solutions to make our vehicles more secure, to help reduce the risk of theft.
An enhanced security hardware system was introduced in October 2021 (Lexus) and October 2022 (Toyota) on the latest models targeted by criminals. Since which, we have seen a significant drop in thefts of those models.
For older models, we endeavour to create solutions that can offer enhanced protection to our customers. Following significant investments by Toyota GB, in line with that of other vehicle manufacturers, newly developed official Toyota and Lexus security hardware components will very soon be available to fit to those targeted models registered before October 2021.
Following communication from Toyota and Lexus in the coming weeks, owners should contact their local dealer to arrange fitment. Customers can already speak to their local dealer about the fitment of a protective plate to block access to the vehicle’s electronics. This is a nationwide customer care offering available on Toyota RAV4 Hybrid, Lexus RX and Lexus NX.
As a vehicle manufacturer, we can never completely eliminate the risk of vehicle theft. This is an industry-wide issue, concerning all vehicle manufacturers and affecting the most popular models first.
In order to further reduce the theft risk, we regularly collaborate and share information with insurance associations, police and law enforcement authorities, theft prevention experts and other key stakeholders around the world. This enables us to understand new threats and techniques used by thieves and develop more secured systems.
Alongside our efforts, we urge those authorities to focus on reducing the number of thefts. We would also like to see action taken that leads to the end to the online sale of devices used by criminals to steal cars without using the car keys, as these devices serve no purpose other than a criminal one.
How do thieves manage to steal cars in this manner?
The thieves disconnect part of the headlamp and use a malicious device to send signals to the control CAN bus (the communication ‘backbone’ within a car) that allow the doors to open and the car to start without the key or remote control.
Thieves need to:
- Purchase a relatively expensive rogue device (third-party ‘emergency start‘ device which costs around £2500 – £4000 each)
- Gain physical access to the vehicle’s CAN bus communication wires for an uninterrupted period.
The third-party ‘emergency start‘ device has the capability to initiate an exploit in the following manner:
- Once connected to the vehicle’s CAN bus communication wires, the third-party ‘emergency start‘ device can send a prioritised series of CAN signals to bypass the vehicle’s security and immobiliser systems, which could allow a thief to unlock the doors and turn the vehicle’s ignition ON.
- The third-party ‘emergency start’ device is then disconnected.
- At this point a thief can enter the vehicle and start the car without the key.
What is Toyota doing to prevent these types of attacks?
Toyota and Lexus take the issue of car theft very seriously. We are continuously developing technical solutions to make our vehicles more secure to help reduce the risk of theft.
In fact, in the UK market, an enhanced security hardware was introduced in October 2021 on the latest versions of the models that had previously been targeted by criminals. Since then, we have seen a significant drop-off in terms of successful thefts of those models.
For older models we endeavour to create solutions that can offer enhanced protection to our customers.
We cannot divulge the precise nature of the imminent security enhancement; should we do so we risk offering information into the public domain that could be of interest to criminal parties.
The intention is to make the security enhancement available to vehicles affected by CAN bus theft.
What models are known to be targeted by this issue and are newer models affected?
The models primarily targeted are fourth-generation Lexus RX and the Toyota RAV4.
For older models we endeavour to create solutions that can offer enhanced protection to our customers.
Since October 2022, Toyota models are subject to a platform change that negates CAN Bus theft. This excludes Hilux, which is not subject to CAN bus attacks.
When did Toyota first become aware of the vulnerability in the security systems?
It is not so much vulnerability of the security systems but more so the growing rise in criminal gangs targeting vehicles for ‘cannibalisation’ and/or complete theft.
Instances appear to have been rising significantly from 2019-2020.
There are many factors involved and at a global level. This includes parts of the world experiencing parts shortage which results in targeted thefts to supply vehicles and/or parts sent to countries experiencing trade restrictions.
Which models can be fitted with the enhanced security feature?
It can be fitted to Land Cruiser 150, RAV4 and first-generation Toyota C-HR.
When is the enhanced security upgrade going to be available and will it be free of charge?
Exact timings are still to be confirmed. We anticipate being able to advise the Toyota Centre network with full details soon. The security enhancement needs to be carried out at a Toyota Centre. Costs are under review; customers may incur a nominal charge.
Are any new models targeted by thieves?
While no car can be considered 100% immune to criminal intent, more recent models are equipped with enhanced security systems aimed at deterring CAN bus type thefts.
Given that the rise in this type or car theft has been known for several years in other countries and is growing in the UK why wasn’t I told about this?
Toyota takes the issue of car crime very seriously. To protect customers’ vehicles our approach is not to disclose our vehicle theft analysis data. The sharing of information could enable thieves to find ways to circumvent anti–theft technologies or make some models particularly attractive to some thieves and unnecessarily vulnerable to attack.
Is a Vehicle Protection Plate (VPP) available for any Toyota models?
Yes, for RAV4, excluding the Plug-In Hybrid model (which is not susceptible to CAN bus attack). The fitment is chargeable.
What is the countermeasure and what’s the plan moving forwards?
We are continuously developing technical solutions to make our vehicles more secure and reduce the risk of theft. An enhanced security hardware was introduced in October 2022 on the latest versions of the models that had previously been targeted by criminals. Since then, we have seen a significant drop-off in terms of successful thefts of those models.
Why is there no recall for vehicles susceptible to the CAN bus attack?
Recall announcements in the UK are guided by very specific guidelines as drawn up by the Driver and Vehicle Standards Agency (DVSA). To qualify as a recall, the issue must relate to a safety or thermal type issue where there is potential for injury as a result of vehicle manufacture or component failure. Only in these such circumstances can a recall be announced. In recall circumstances, the DVSA will provide manufacturers access to ownership records for purpose of communication. Instances of theft do not trigger a recall.
Will Toyota pay for damage caused by an attempted theft?
No. This will need to be addressed by the customer and the vehicle insurers. While we understand theft or attempted theft can be highly upsetting and, in some cases, a costly experience, in such instances customers are first and foremost victims of crime. Toyota does not cover costs associated with criminal activity either under the terms of the warranty or as goodwill.
What is the position with insuring affected models?
As a manufacturer, we stay close to Toyota Insurance colleagues and indeed all motor insurers. We are aware that in many cases, insurance premiums might have increased as a direct result of vehicle crime. We need to refer you to your insurer for further comment.
My Toyota Landcruiser EA70HFK was stolen from my driveway last night using this method in Braintree Essex. I am very annoyed I was not informed of this by Toyota UK or my dealership before this happened so I could take action to attempt to protect my vehicle. I have only come across this today researching how they achieved this. Very disappointed, Jason.
Hi Jason, thanks for getting in touch.
We are so sorry to hear that you and your Land Cruiser have been a victim of this theft. Please report to the local authorities if you have not already done so, although no doubt you have.
Thanks,
Toyota UK
Hi,
My car plate is RO73ULU, is it needs to have the enhanced security upgrade?
Hi KK,
Thanks for your comment.
While no car can be considered 100% immune to criminal intent, the RAV4 Plug-in is not susceptible to CAN bus attack.
Please let us know if you have any further questions.
Thanks.
Evening – I have the 1.8 Toyota CHR Hybrid – Bn72yub, will I need to contact my local dealer to have the protective plate fitted?
Hi Steve,
Unfortunately, as per our latest statement, your C-HR is a targeted model.
The Vehicle Protection Plate you are referring to is not available for the C-HR.
However, following significant investments, newly developed official Toyota security hardware components will be available very soon for your C-HR.
The exact timings of this security enhancement are still to be confirmed. We anticipate being able to advise Centres with full details soon.
If you would like us to contact you when this enhancement will be available, please may you confirm that you are happy for us to contact you via email.
Thanks.
Evening
Yes please contact me via email as soon as the security hardware is available.
Cheers
Steve C
Hi Steve,
Thanks for confirming.
Please may you confirm your nearest Toyota Centre so we can request that they get in touch once this is available.
Thank you.
My RAV4 was stolen using this method from outside my house last night in Kent. Like the previous poster, the first I have heard of this is when researching how an earth they managed to do this. I have to be honest, I am pretty disappointed that no efforts have been made to communicate this with your customers. I now have no vehicle and contents, and no doubt a lengthy wait for the insurance to sort themselves out. Was considering replacing with the same make/model of car but now I am having serious second thoughts about that given this information but more importantly given the fact you have done nothing to let owners know.
Hi Karen,
We are so sorry to hear that your RAV4 has been a victim of this crime and for the distress this has caused.
Please be assured that we are currently working on a security enhancement which has already been introduced in more recent models, to which no CAN Bus thefts have been reported.
Once again, we are very sorry that you have been targeted by this horrible crime.
We trust that the police and your insurance company are now working closely with you to resolve this matter and minimise any further inconvenience.
If there is anything else that we can assist you with at this time, please let us know.
Thanks.
Well the fact that I am now financially out of pocket, have to replace items in the car, deal with inflated insurance premiums going forward, will have zero equity after finance paid off to put to a new car, and have the expense of finding and buying a new car……along with the fact I have been left with no means of transport until the insurance settles and I find a new car has meant massive inconvenience and stress just dealing with day to day logistics.
I called Toyota customer relations and it was a total waste of time. I don’t particularly care what you are doing going forward – it’s too late for me and many many others. What are you doing to make it right for us?! Absolutely nothing. No offer of a courtesy car, no offer of anything. Just a response to say you didn’t have to tell anyone because it’s not a safety risk?! Really – what happens when a stolen Toyota is involved in a road death then? Surely this is a safety issue. Even so, just because you apparently didn’t HAVE to tell your customers does not mean that you CAN’T. Essentially the view that this is the insurance company’s issue is so flawed, that passes the expense elsewhere. You are a global company with responsibilities. Start taking them seriously. Absolutely disgusted and appalled with this whole situation and especially the stance continued to be taken to the victims of these crimes (which were avoidable if Toyota had done the right thing).
Both my husbands Lexus and my toyota were stolen from our drive on the same night last week. We have had no communication from either Lexus or Toyota regarding these issues. We should not have to search for this information. As loyal customers who have paid nearly £70000 in cars, we should have been contacted by the companies to let us k wot his was an issue. Now we face being out of pocket for a fault that we were not aware of and no one told us about. Now we have to also deal with four children and no family car. Thai is just not good enough when we paid so much for the cars.
Hi Joanne,
We are so sorry to hear that you and your husband have both been victims of this horrible crime and for the distress this has caused you both.
Please be assured that we are constantly working on enhancing our security features on our vehicles and are working closely with the authorities to raise awareness of this crime as well as our technical teams, both here and with Toyota Motor Europe and our insurance experts to look at ways to further protect our vehicles and to develop technology and components to try to prevent vehicle thefts.
We trust that the police and your insurance company are now working closely with you to resolve this matter and minimise any further inconvenience.
Once again, we are truly sorry that you have been affected by this horrible crime.
Thanks.
I have a RAV4 plate WF20BBN.
I am guessing this falls under the at risk group.
Purchased from a Toyota dealer not too long ago, so I’m a little disappointed that I wasn’t informed of this issue – I feel as though I have been unable to make an informed decision, as all information was not provided at the time.
But, it will be up to me to fit the bill as I understand it. Does my vehicle qualify for the security upgrade and plates?
Hi Joni,
Thanks for your comment.
Unfortunately, as per our latest statement, your RAV4 is a targeted model.
Your RAV4 is eligible for the Vehicle Protection Plates and will also be eligible for the enhanced security upgrade.
The exact timings of the security enhancement are still to be confirmed, but we anticipate being able to advise Centres with full details very soon.
For the Vehicle Protection Plates, unfortunately these are currently on back order, so we would recommend getting in touch with your local Toyota Centre directly who will be able to notify you when they can be installed.
In the meantime, you may wish to look into additional security such as visual deterrents or secondary immobilisers.
We hope this information is useful, please let us know if you have any further questions.
Thanks.
I booked my rav4 for the security plate install in FRF Cardiff. On arrival I was informed that the part was on backorder and so it was a wasted journey. Toyota you should have a massive stock of these items by now so that we can at least make it more difficult for the thieves.
Hello, my friend had his Land cruiser stolen and he has advised me that my 70 plate CHR is also vunerable. I rang my dealership and they said there is no plan to fit the protective plate to CHR and they knew nothing about it! Looking at your chart above my CHR is within the targetted vehicles and I wondered what to do next to protect my car?
Hi Alison,
Unfortunately you are correct, the Vehicle Protection Plate is not available for the C-HR.
However, following significant investments, newly developed official Toyota security hardware components will be available very soon for your C-HR.
The exact timings of this security enhancement are still to be confirmed. We anticipate being able to advise Centres with full details soon.
If you would like us to contact you when this enhancement will be available, please may you confirm that you are happy for us to contact you via email.
Thanks.
Please contact me when the security enhancmenat because available.
Hi Alison,
Thanks for confirming.
We will just need to take your vehicle registration to process this request.
We will ensure to redact this before we publish your comment, though.
Thanks.
Likewise I am only coming across this thread after a bit of googling after having our family Rav 4 2019 hybrid stolen from the driveway last night.
It took the thieves under 6 minutes to steal the car, from the footage and the audio it sounds like they were able to access the CAN bus with some well aimed force and then shortly after the lights come on, they’re in the car then driving off into the night.
Very disappointed, had I known about this vulnerability I would have taken appropriate action.
There needs to be much better coms being sent to owners of impacted vehicles.
Hi there,
We are so sorry to hear that you have been a victim of this horrible crime and for the distress this has caused.
Please be assured that we are constantly working on enhancing our security features on our vehicles and are working closely with the authorities to raise awareness of this crime as well as our technical teams, both here and with Toyota Motor Europe and our insurance experts to look at ways to further protect our vehicles and to develop technology and components to try to prevent vehicle thefts.
We trust that the police and your insurance company are now working closely with you to resolve this matter and minimise any further inconvenience.
If there is anything else that we can assist you with at this time, please let us know.
Thanks.
Hello, sorry if this question has already been asked, or indeed the answer posted above. However, we just bought a 2nd hand Corolla on a 20 plate and my brother has mentioned that there are spates of Toyotas being stolen with thieves developing a system that can overcome key signals etc and take the car in a matter of minutes. From what i can see, the Corolla is not one of the models that needs to have the protective plate put in place and would really appreciate feedback/comments as to whether i have read this correctly. Thank you
Hi Shirley,
Thanks for your question. Congratulations on your Corolla purchase!
While no car can be considered 100% immune to criminal intent, the Corolla is not affected by this type of theft.
Please let us know if there is anything else that we can assist you with.
Thanks.