We take the issue of Toyota and Lexus vehicle theft very seriously. We are continuously developing technical solutions to make our vehicles more secure, to help reduce the risk of theft.
An enhanced security hardware system was introduced in October 2021 (Lexus) and October 2022 (Toyota) on the latest models targeted by criminals. Since which, we have seen a significant drop in thefts of those models.
For older models, we endeavour to create solutions that can offer enhanced protection to our customers. Following significant investments by Toyota GB, in line with that of other vehicle manufacturers, newly developed official Toyota and Lexus security hardware components will very soon be available to fit to those targeted models registered before October 2021.
Following communication from Toyota and Lexus in the coming weeks, owners should contact their local dealer to arrange fitment. Customers can already speak to their local dealer about the fitment of a protective plate to block access to the vehicle’s electronics. This is a nationwide customer care offering available on Toyota RAV4 Hybrid, Lexus RX and Lexus NX.
As a vehicle manufacturer, we can never completely eliminate the risk of vehicle theft. This is an industry-wide issue, concerning all vehicle manufacturers and affecting the most popular models first.
In order to further reduce the theft risk, we regularly collaborate and share information with insurance associations, police and law enforcement authorities, theft prevention experts and other key stakeholders around the world. This enables us to understand new threats and techniques used by thieves and develop more secured systems.
Alongside our efforts, we urge those authorities to focus on reducing the number of thefts. We would also like to see action taken that leads to the end to the online sale of devices used by criminals to steal cars without using the car keys, as these devices serve no purpose other than a criminal one.
How do thieves manage to steal cars in this manner?
The thieves disconnect part of the headlamp and use a malicious device to send signals to the control CAN bus (the communication ‘backbone’ within a car) that allow the doors to open and the car to start without the key or remote control.
Thieves need to:
- Purchase a relatively expensive rogue device (third-party ‘emergency start‘ device which costs around £2500 – £4000 each)
- Gain physical access to the vehicle’s CAN bus communication wires for an uninterrupted period.
The third-party ‘emergency start‘ device has the capability to initiate an exploit in the following manner:
- Once connected to the vehicle’s CAN bus communication wires, the third-party ‘emergency start‘ device can send a prioritised series of CAN signals to bypass the vehicle’s security and immobiliser systems, which could allow a thief to unlock the doors and turn the vehicle’s ignition ON.
- The third-party ‘emergency start’ device is then disconnected.
- At this point a thief can enter the vehicle and start the car without the key.
What is Toyota doing to prevent these types of attacks?
Toyota and Lexus take the issue of car theft very seriously. We are continuously developing technical solutions to make our vehicles more secure to help reduce the risk of theft.
In fact, in the UK market, an enhanced security hardware was introduced in October 2021 on the latest versions of the models that had previously been targeted by criminals. Since then, we have seen a significant drop-off in terms of successful thefts of those models.
For older models we endeavour to create solutions that can offer enhanced protection to our customers.
We cannot divulge the precise nature of the imminent security enhancement; should we do so we risk offering information into the public domain that could be of interest to criminal parties.
The intention is to make the security enhancement available to vehicles affected by CAN bus theft.
What models are known to be targeted by this issue and are newer models affected?
The models primarily targeted are fourth-generation Lexus RX and the Toyota RAV4.
For older models we endeavour to create solutions that can offer enhanced protection to our customers.
Since October 2022, Toyota models are subject to a platform change that negates CAN Bus theft. This excludes Hilux, which is not subject to CAN bus attacks.
When did Toyota first become aware of the vulnerability in the security systems?
It is not so much vulnerability of the security systems but more so the growing rise in criminal gangs targeting vehicles for ‘cannibalisation’ and/or complete theft.
Instances appear to have been rising significantly from 2019-2020.
There are many factors involved and at a global level. This includes parts of the world experiencing parts shortage which results in targeted thefts to supply vehicles and/or parts sent to countries experiencing trade restrictions.
Which models can be fitted with the enhanced security feature?
It can be fitted to Land Cruiser 150, RAV4 and first-generation Toyota C-HR.
When is the enhanced security upgrade going to be available and will it be free of charge?
Exact timings are still to be confirmed. We anticipate being able to advise the Toyota Centre network with full details soon. The security enhancement needs to be carried out at a Toyota Centre. Costs are under review; customers may incur a nominal charge.
Are any new models targeted by thieves?
While no car can be considered 100% immune to criminal intent, more recent models are equipped with enhanced security systems aimed at deterring CAN bus type thefts.
Given that the rise in this type or car theft has been known for several years in other countries and is growing in the UK why wasn’t I told about this?
Toyota takes the issue of car crime very seriously. To protect customers’ vehicles our approach is not to disclose our vehicle theft analysis data. The sharing of information could enable thieves to find ways to circumvent anti–theft technologies or make some models particularly attractive to some thieves and unnecessarily vulnerable to attack.
Is a Vehicle Protection Plate (VPP) available for any Toyota models?
Yes, for RAV4, excluding the Plug-In Hybrid model (which is not susceptible to CAN bus attack). The fitment is chargeable.
What is the countermeasure and what’s the plan moving forwards?
We are continuously developing technical solutions to make our vehicles more secure and reduce the risk of theft. An enhanced security hardware was introduced in October 2022 on the latest versions of the models that had previously been targeted by criminals. Since then, we have seen a significant drop-off in terms of successful thefts of those models.
Why is there no recall for vehicles susceptible to the CAN bus attack?
Recall announcements in the UK are guided by very specific guidelines as drawn up by the Driver and Vehicle Standards Agency (DVSA). To qualify as a recall, the issue must relate to a safety or thermal type issue where there is potential for injury as a result of vehicle manufacture or component failure. Only in these such circumstances can a recall be announced. In recall circumstances, the DVSA will provide manufacturers access to ownership records for purpose of communication. Instances of theft do not trigger a recall.
Will Toyota pay for damage caused by an attempted theft?
No. This will need to be addressed by the customer and the vehicle insurers. While we understand theft or attempted theft can be highly upsetting and, in some cases, a costly experience, in such instances customers are first and foremost victims of crime. Toyota does not cover costs associated with criminal activity either under the terms of the warranty or as goodwill.
What is the position with insuring affected models?
As a manufacturer, we stay close to Toyota Insurance colleagues and indeed all motor insurers. We are aware that in many cases, insurance premiums might have increased as a direct result of vehicle crime. We need to refer you to your insurer for further comment.
Hi, my 2021 plate C-hr GR Sport was stolen last night while the keys were in my flat. It was quickly recovered using the tracking app thankfully. To read all of the above comments is very disappointing to be honest. Explains why my insurance is so high. Maybe it wasn’t such a good idea upgrading on my pcp to a newer C-hr. Is the VPP available for my car?
Morning Paul
We are sorry to hear that this has happened.
May we have your vehicles registration and possibly the order details for the new vehicle order you have placed please?
Kind regards
My stolen C-hr is YS21*** which replaced C-hr YP68***
Hi Paul
Do you have your new car yet?
Kind regards
Yes, it was YS21GUE that was stolen. I wish I’d not bothered upgrading on my pcp now. The car was purchased from Burrows Sheffield and has and is proving a black hole that my money is disappearing down.
Not happy. By the way I have purchased a Stoplock Pro Elite, another 50 quid spent!
Regards
My Toyota RAV4 Hybrid 2023 had been a subject of an attempted theft. The manner was exactly as described .After finishing a night found that the plastic arc was disturbed but due to minor distortion I thought it might just be caused by accidentally damaged by teenagers who are regularly passing through the car park. Until Its been noticed that the passenger’s headlight wasn’t working. I called AA to assist and was examined. Found that the wirings were already disconnected. I’m certain that if it hasn’t been for the regular passing of ambulances that night, which definitely interrupted the thieves, the car would have been stolen. I sent an email to my dealership and seemed to have been ignored as no acknowledgement was sent ( has not have a good experience with them since purchasing this car). I will send an email again with the CRIME no as I only had the reference at the time. I’m so glad I came across this forum and hoping that car could get assessed if suitable to be fitted with the plate. Or other security ewuipmets available to secure the cat.
Hi Chris,
May we have your vehicles registration details and the Toyota Centre that you have written to please.
Your vehicle should be allegeable for the vehicle protection plates so we can arrange the Toyota Centre to contact you about this?
Kind regards
I have a service booked in May so asked the Toyota garage to also add the free plate whilst car is in for service. Response is “You do have two outstanding safety recalls on the vehicle, which are free of charge, however although the security plates are free of charge, you do need to pay the fitting cost which is £70. Please confirm if you wish to add the plates to the booking.
If the recalls are free of charge what si the £70 fitting cost for?
Hi Tom,
Recall announcements in the UK are guided by very specific guidelines as drawn up by the Driver and Vehicle Standards Agency (DVSA).
To qualify as a recall, the issue must relate to a safety or thermal type issue where there is potential for injury as a result of vehicle manufacture or component failure.
Only in these such circumstances can a recall be announced. In recall circumstances, the DVSA will provide manufacturers access to ownership records for purpose of communication.
Instances of theft do not trigger a recall.
Kind regards
My parents 2018 CHR was stolen in this exact way on Monday 8th April (you can see on the cctv how they gain access). Toyota have had 4 years to tell customers and haven’t bothered.
We have taken some very brief legal advice today. Ignore what Toyota say, they absolutely will be covering costs my elderly parents will incur including new car and increased insurance premiums.
This simply wouldn’t have happened had Toyota contacted owners when you first found out. They have tried to hide the issue. And worse still continued to sell vehicles they knew had the flaw.
Given that this statement is essentially a “How to guide” for theives, I’d strongly advise owners of affected vehicles to get a decent steering lock.
If you owned an affected vehicle and it was stolen in this way, get some legal advice and get in touch with Toyota. They absolutely are responsible
Hi Adam
We understand that you have contacted are executive office directly and we will be responding to you directly through that channel.
Kind regards
Thank you and I appreciate that. I just wanted to make sure others were aware the information you have released is incorrect. Toyota is absolutely responsible for costs incurred.
Also, this affects some models up to 2022? Yet you were aware of it in 2019. So you were selling people vehicles knowing how easy they were to steal, and withholding that information. At best that is dishonest, at worse its fraudulent.
This is going to be a very costly lie for Toyota
Hi Adam
Comments noted and we will respond to you via email as previously stated.
Kind regards
Adam, my CHR was also stolen at 01.36hrs on Tuesday morning. I am devastated. Can we link up as I also wish to seek legal advice and would welcome a chat and some guidance
Hi Adam,
Like the person above, it would be great to hear more about what you have done as this has just happened to us and I cannot believe what I’ve since discovered.
Thanks,
Ben
And here we are 6 years later and Toyota have not mentioned a thing about it. My RAV4 (2021) car was
stolen last week using this exact get around in the car bus known issue, so I will be getting legal advice also regarding the costs to me that I will experience.
Hi Clive
Sorry to learn you have been a victim of crime.
We would suggest reading the full article on our website if you haven’t already, for full details on this concern.
Kind regards
i have just bought a 2024 model is that safe from these forms of theft
Hi Paul
May we have your vehicles registration number please.
Kind regards
I would rather not put my reg out on the net, but it begins gu24
Hi Paul
We cannot work with part of a registration unfortunately.
Who is the Toyota Centre you have spoken to as they should be able to assist with this and we can contact them on your behalf?
Kind regards
I’ve had my 2020 Rav4 Dynamic 7 weeks, I love it but Toyota dealers don’t seem to be interested when I’ve mentioned Canbus plates, so I’m now thinking sadly of getting rid of my car due to the worry of how easy they are to steel because of a bad design.
Hi John
We are surprised to learn that our Network are not interested, may we ask which Toyota Centre you have spoken to and your registration number please.
Kind regards
Unaware of this CAN theft issue I recently purchased a 2020 plate Toyota Rav4. We have had 2 Rav4’s stolen in the local community in the last month. What can I do to secure my car ASAP? I know they must be eying my car next.
Hi Sid
We would suggest that you speak with your local Toyota Centre as they can fit vehicle protection plates.
Kind regard
I have had my 2022 CHR Stolen from Guildford Park and ride. Recovered by police after 24 hours. Very disappointing that Toyota knows how easy it is gir the thiefs to break in. I presume my car should have the enhanced security. Please zdvise
Morning Barbara
Sorry to learn you have been a victim of crime, it’s great the Police were able to recover your Toyota C-HR for you.
May we have your vehicles registration number please.
Kind regards
FP 22 OUF.
Hi Barbara.
Any Toyota C-HR produced between October 2016 and October 2022 will be affected.
Since October 2022, Toyota models are subject to a platform change that negates CAN Bus theft. This excludes Hilux which is not subject to CAN bus attacks.
Kind regards
I am very disappointed with your response. If Toyota knew about this problem why was I not warned about it when I bought the car from a Toyota main dealer. You have a duty of care to your customers. It may not be a direct safety issue but is a safety issue.
It is costing me lot of money and distress.
Hi Barbara
Toyota takes the issue of car crime very seriously. To protect customers’ vehicles our approach is not to disclose our vehicle theft analysis data. The sharing of information could enable thieves to find ways to circumvent anti–theft technologies or make some models particularly attractive to some thieves and unnecessarily vulnerable to attack.
We are continuously developing technical solutions to make our vehicles more secure and reduce the risk of theft. An enhanced security hardware was introduced in October 2022 on the latest versions of the models that had previously been targeted by criminals. Since then, we have seen a significant drop-off in terms of successful thefts of those models.
As a manufacturer, we stay close to Toyota Insurance colleagues and indeed all motor insurers. We are aware that in many cases, insurance premiums might have increased as a direct result of vehicle crime. We need to refer you to your insurer for further comment.
Kind regards
This really is not good enough response. You were fitting remedial action 4 months after my car was first registered. It makes my car more vulnerable as the thieves will know that the cars after oct 2022 are protected. I will be following this up in the press. I hope you will see the injustice in this and will arrange remedial work to be done at your expense to my car and all the others similarly at risk.
Thank you for your comments, these have been noted and are appreciated.
But what are you doing about it.
Hi Barbara
As you are aware, we are working on a preventative and updates on this will be advised accordingly.
Kind regards
This is really no good to Mr. I want the plates fitted free if charge znd uou to take ownership of your negligence in warning me about this problem when I bought the car from a main dealer in July 2023. It was previously owned by Toyota head office, so you can not tell me they were not aware. Wake up Toyota and take responsibility and act honourably
I own a 2019 RAV4 Excel. I spoke to my local dealership in Nottingham regarding fitting the anti-theft plate and they told me that I have to request my insurance to provide me a letter to authorize me to fit. However, my insurance is unwilling to provide this letter as it stated that this isn’t something they’re advising as an insurer. My local dealership is unwilling to fit the anti-theft plate without the insurance letter. Can you instruct me further regarding this please?
Hi Man Shing Wong
We can see you have already contacted us via social media, please follow the guidance we have provided there
Kind regards