Toyota GB statement on vehicle theft

Diversity at Toyota

We take the issue of Toyota and Lexus vehicle theft very seriously. We are continuously developing technical solutions to make our vehicles more secure, to help reduce the risk of theft.

An enhanced security hardware system was introduced in October 2021 (Lexus) and October 2022 (Toyota) on the latest models targeted by criminals. Since which, we have seen a significant drop in thefts of those models.

For older models, we endeavour to create solutions that can offer enhanced protection to our customers.  Following significant investments by Toyota GB, in line with that of other vehicle manufacturers, newly developed official Toyota and Lexus security hardware components will very soon be available to fit to those targeted models registered before October 2021.

Following communication from Toyota and Lexus in the coming weeks, owners should contact their local dealer to arrange fitment. Customers can already speak to their local dealer about the fitment of a protective plate to block access to the vehicle’s electronics. This is a nationwide customer care offering available on Toyota RAV4 Hybrid, Lexus RX and Lexus NX.

As a vehicle manufacturer, we can never completely eliminate the risk of vehicle theft. This is an industry-wide issue, concerning all vehicle manufacturers and affecting the most popular models first.

In order to further reduce the theft risk, we regularly collaborate and share information with insurance associations, police and law enforcement authorities, theft prevention experts and other key stakeholders around the world. This enables us to understand new threats and techniques used by thieves and develop more secured systems. 

Alongside our efforts, we urge those authorities to focus on reducing the number of thefts. We would also like to see action taken that leads to the end to the online sale of devices used by criminals to steal cars without using the car keys, as these devices serve no purpose other than a criminal one.

How do thieves manage to steal cars in this manner?

The thieves disconnect part of the headlamp and use a malicious device to send signals to the control CAN bus (the communication ‘backbone’ within a car) that allow the doors to open and the car to start without the key or remote control.

Thieves need to:

  • Purchase a relatively expensive rogue device (third-party ‘emergency start‘ device which costs around £2500 – £4000 each)
  • Gain physical access to the vehicle’s CAN bus communication wires for an uninterrupted period.

The third-party ‘emergency start‘ device has the capability to initiate an exploit in the following manner:

  • Once connected to the vehicle’s CAN bus communication wires, the third-party ‘emergency start‘ device can send a prioritised series of CAN signals to bypass the vehicle’s security and immobiliser systems, which could allow a thief to unlock the doors and turn the vehicle’s ignition ON.
  • The third-party ‘emergency start’ device is then disconnected.
  • At this point a thief can enter the vehicle and start the car without the key.

What is Toyota doing to prevent these types of attacks?

Toyota and Lexus take the issue of car theft very seriously.  We are continuously developing technical solutions to make our vehicles more secure to help reduce the risk of theft.

In fact, in the UK market, an enhanced security hardware was introduced in October 2021 on the latest versions of the models that had previously been targeted by criminals. Since then, we have seen a significant drop-off in terms of successful thefts of those models.

For older models we endeavour to create solutions that can offer enhanced protection to our customers. 

We cannot divulge the precise nature of the imminent security enhancement; should we do so we risk offering information into the public domain that could be of interest to criminal parties.

The intention is to make the security enhancement available to vehicles affected by CAN bus theft.

What models are known to be targeted by this issue and are newer models affected?

The models primarily targeted are fourth-generation Lexus RX and the Toyota RAV4. 

For older models we endeavour to create solutions that can offer enhanced protection to our customers.

Since October 2022, Toyota models are subject to a platform change that negates CAN Bus theft. This excludes Hilux, which is not subject to CAN bus attacks.

When did Toyota first become aware of the vulnerability in the security systems?

It is not so much vulnerability of the security systems but more so the growing rise in criminal gangs targeting vehicles for ‘cannibalisation’ and/or complete theft.  

Instances appear to have been rising significantly from 2019-2020.

There are many factors involved and at a global level. This includes parts of the world experiencing parts shortage which results in targeted thefts to supply vehicles and/or parts sent to countries experiencing trade restrictions.

Which models can be fitted with the enhanced security feature?

It can be fitted to Land Cruiser 150, RAV4 and first-generation Toyota C-HR.

When is the enhanced security upgrade going to be available and will it be free of charge?

Exact timings are still to be confirmed. We anticipate being able to advise the Toyota Centre network with full details soon. The security enhancement needs to be carried out at a Toyota Centre. Costs are under review; customers may incur a nominal charge.

Are any new models targeted by thieves?

While no car can be considered 100% immune to criminal intent, more recent models are equipped with enhanced security systems aimed at deterring CAN bus type thefts.

Given that the rise in this type or car theft has been known for several years in other countries and is growing in the UK why wasn’t I told about this?

Toyota takes the issue of car crime very seriously. To protect customers’ vehicles our approach is not to disclose our vehicle theft analysis data. The sharing of information could enable thieves to find ways to circumvent anti–theft technologies or make some models particularly attractive to some thieves and unnecessarily vulnerable to attack.

Is a Vehicle Protection Plate (VPP) available for any Toyota models?

Yes, for RAV4, excluding the Plug-In Hybrid model (which is not susceptible to CAN bus attack). The fitment is chargeable.

What is the countermeasure and what’s the plan moving forwards?

We are continuously developing technical solutions to make our vehicles more secure and reduce the risk of theft. An enhanced security hardware was introduced in October 2022 on the latest versions of the models that had previously been targeted by criminals. Since then, we have seen a significant drop-off in terms of successful thefts of those models.

Why is there no recall for vehicles susceptible to the CAN bus attack?

Recall announcements in the UK are guided by very specific guidelines as drawn up by the Driver and Vehicle Standards Agency (DVSA). To qualify as a recall, the issue must relate to a safety or thermal type issue where there is potential for injury as a result of vehicle manufacture or component failure. Only in these such circumstances can a recall be announced. In recall circumstances, the DVSA will provide manufacturers access to ownership records for purpose of communication. Instances of theft do not trigger a recall.

Will Toyota pay for damage caused by an attempted theft?

No. This will need to be addressed by the customer and the vehicle insurers. While we understand theft or attempted theft can be highly upsetting and, in some cases, a costly experience, in such instances customers are first and foremost victims of crime. Toyota does not cover costs associated with criminal activity either under the terms of the warranty or as goodwill.

What is the position with insuring affected models?

As a manufacturer, we stay close to Toyota Insurance colleagues and indeed all motor insurers. We are aware that in many cases, insurance premiums might have increased as a direct result of vehicle crime. We need to refer you to your insurer for further comment.

859 comments

  1. Thank you for information. But why should there be any cost to customer. Its enough thieves can access our vehicles. Now we have to arrange appointments and get to Toyota centre’s.

      1. Hi Mark,
        Thank you for confirming.
        Unfortunately, as per our latest statement, your RAV4 is a targeted model.
        However, following significant investments, newly developed official Toyota security hardware components will be available very soon to fit to these targeted models.
        The exact timings of the security enhancement are still to be confirmed. We anticipate being able to advise Centres with full details before the end of April.
        However, a Vehicle Protection Plate is available for your RAV4, please contact your nearest Toyota Centre if you would like to have this fitted.
        Thank you.

    1. Hi Arnold,
      Thanks for your comment.
      Unfortunately, as per our latest statement, your RAV4 is a targeted model.
      The costs of the security enhancements are currently under review, customers may incur a nominal charge.
      A Vehicle Protection Plate is also available for your RAV4, please contact your nearest Toyota Centre if you would like to have this fitted.
      Thank you.

  2. Is my Toyota chr 2018 model a risk reg DA55WED and if yes can the box that covers the canbus be fitted when I have full service next month in with the cost of my service

    1. Hi Darren,
      Unfortunately, as per our latest statement, your C-HR is a targeted model.
      The Vehicle Protection Plate is not available for the C-HR.
      However, following significant investments, newly developed official Toyota security hardware components will be available very soon for your C-HR.
      The exact timings of this security enhancement are still to be confirmed. We anticipate being able to advise Centres with full details before the end of April.
      We hope this helps, please let us know if there is anything else that we can assist you with.
      Thank you.

      1. Will this new security update be free of charge when it’s eventually released?

      2. Hi Darren,
        The costs of the security enhancements are currently under review, customers may incur a nominal charge.
        Thank you.

      1. Hi Robert,
        Unfortunately we have been unable to find a vehicle with the registration you have provided.
        However, the RAV4 Plug-in is not susceptible to CAN bus attack.
        Please let us know if there is anything else that we can assist you with.
        Thanks.

  3. The problem remains with the CAN bus and the protection plate is only a deterrent to the thieves to make it harder to access the CAN bus.

    My RAV4 has been stolen twice, with the second time the thieves removing a Stop Lock Pro Elite by cutting through the steering wheel. Both times they popped the headlight, and within seconds opened the car doors, which is not a prolonged time of access, its literally seconds.

    If thieves are determined enough to cut through a steering wheel lock, then they will be determined enough to remove/cut a protection plate. The Toyota dealers gave a quote of 4,000 pounds to my insurer to repair. The thieves care little for damage in their attempts to steal!

    Toyota is really failing their customers. The customers bear the financial costs of damage, the depreciation of stolen vehicle, the increased insurance premiums if the Insurer will actually insure them.

    Once again, Toyota is misleading saying that the protection plate will solve all problems, when the CAN bus wiring issue still remains. Will Toyota guarantee no vehicles will be stolen with a protection plate? Read the article, of course not! Toyota does not cover crime costs, and just asks the customer to refer to their own insurer. The protection plate is to pretend to customers that Insurers will be fooled. I hardly think Insurers will think the protection plate solves the problem!

    Your statement is simply saying its not Toyota’s problem. Refer the customer to their insurers! Toyota were the ones who build a car of unsatisfactory quality which is unfit for purpose. What is really alarming, is that Toyota were aware of the issue from 2019, whilst Lexus owners have known about the issue from 2016 onwards. Toyota have been deceivingly selling vehicles with known security flaws for 5 years…

    1. Hi Nathan,
      We are really sorry to hear about the thefts of your RAV4 and the distress this has caused..
      Please be assured that we are constantly working on enhancing our security features and the protection plate was introduced as one such step to deter theft and provide an additional layer of security.
      Unfortunately, we cannot guarantee that the implementation of the protection plate will completely eliminate the risk of theft.
      We are working closely with the authorities to raise awareness of this crime as well as our technical teams, both here and with Toyota Motor Europe and our insurance experts to look at ways to further protect our vehicles and to develop technology and components to try to prevent vehicle thefts.
      Once again, we are very sorry that you have been targeted by this horrible crime.
      If there is anything else that we can assist you with at this time, please let us know.
      Thanks

      1. Yes Toyota GB can offer to buy my vehicle back from me as I wish to reject the vehicle as unfit for purpose and of unsatisfactory quality.

        Toyota Customer services have said the Motor Ombudsman are the only people who can help me with this, so I have made an official complaint to the Ombudsman.

        If you wish to assist me, please reach out to me before the Motor Ombudsman processes the complaint proceedings.

  4. I have a Toyota Corolla Excel, first pre registered by Toyota then becoming my property and registered in my name in October 2021. Should I be worried that it is a potential target for theft? I always turn off my key for and use a faraday box but can this be bypassed by gaining access to the CAN system?

    1. Hi Terry,
      Thanks for your question.
      While no car can be considered 100% immune to criminal intent, as stated in the article, the Corolla is not affected by this type of theft.
      Please let us know if there is anything else that we can assist you with.
      Thanks.

  5. Would it be a better solution to disable the CAN bus when the engine is off or when the security has been enabled.? Seems just another weak solution.

    1. Hello Sam,
      Thanks for your question.
      This will be an additional security feature.
      We cannot divulge the precise nature of the imminent security enhancement; should we do so we risk offering information into the public domain that could be of interest to criminal parties.
      We hope this helps.
      Thanks.

  6. I have a 2019 Toyota Corolla AD19EYM. I read elsewhere that the earlier Corolla models were vulnerable to a CANBUS attack but your article says that this is not true.
    Could you confirm that my car is not at risk of this attack?
    Many thanks.

    1. Hi Paul,
      Thanks for your question.
      While no car can be considered 100% immune to criminal intent, the Corolla is not affected by this type of theft.
      Please let us know if there is anything else that we can assist you with.
      Thanks.

Leave a Reply

Your email address will not be published. Required fields are marked *

To be the first to hear about all of our latest news, offers and events, check the box below, we’ll send these communications by email, phone, SMS or post. Be assured that Toyota will only share your personal information with companies that are an integral part of fulfilling the services we deliver. If you would like to find out more about how we process your data please visit our privacy policy for details.

I understand that I can unsubscribe at any time.