We take the issue of Toyota and Lexus vehicle theft very seriously. We are continuously developing technical solutions to make our vehicles more secure, to help reduce the risk of theft.
An enhanced security hardware system was introduced in October 2021 (Lexus) and October 2022 (Toyota) on the latest models targeted by criminals. Since which, we have seen a significant drop in thefts of those models.
For older models, we endeavour to create solutions that can offer enhanced protection to our customers. Following significant investments by Toyota GB, in line with that of other vehicle manufacturers, newly developed official Toyota and Lexus security hardware components will very soon be available to fit to those targeted models registered before October 2021.
Following communication from Toyota and Lexus in the coming weeks, owners should contact their local dealer to arrange fitment. Customers can already speak to their local dealer about the fitment of a protective plate to block access to the vehicle’s electronics. This is a nationwide customer care offering available on Toyota RAV4 Hybrid, Lexus RX and Lexus NX.
As a vehicle manufacturer, we can never completely eliminate the risk of vehicle theft. This is an industry-wide issue, concerning all vehicle manufacturers and affecting the most popular models first.
In order to further reduce the theft risk, we regularly collaborate and share information with insurance associations, police and law enforcement authorities, theft prevention experts and other key stakeholders around the world. This enables us to understand new threats and techniques used by thieves and develop more secured systems.
Alongside our efforts, we urge those authorities to focus on reducing the number of thefts. We would also like to see action taken that leads to the end to the online sale of devices used by criminals to steal cars without using the car keys, as these devices serve no purpose other than a criminal one.
How do thieves manage to steal cars in this manner?
The thieves disconnect part of the headlamp and use a malicious device to send signals to the control CAN bus (the communication ‘backbone’ within a car) that allow the doors to open and the car to start without the key or remote control.
Thieves need to:
- Purchase a relatively expensive rogue device (third-party ‘emergency start‘ device which costs around £2500 – £4000 each)
- Gain physical access to the vehicle’s CAN bus communication wires for an uninterrupted period.
The third-party ‘emergency start‘ device has the capability to initiate an exploit in the following manner:
- Once connected to the vehicle’s CAN bus communication wires, the third-party ‘emergency start‘ device can send a prioritised series of CAN signals to bypass the vehicle’s security and immobiliser systems, which could allow a thief to unlock the doors and turn the vehicle’s ignition ON.
- The third-party ‘emergency start’ device is then disconnected.
- At this point a thief can enter the vehicle and start the car without the key.
What is Toyota doing to prevent these types of attacks?
Toyota and Lexus take the issue of car theft very seriously. We are continuously developing technical solutions to make our vehicles more secure to help reduce the risk of theft.
In fact, in the UK market, an enhanced security hardware was introduced in October 2021 on the latest versions of the models that had previously been targeted by criminals. Since then, we have seen a significant drop-off in terms of successful thefts of those models.
For older models we endeavour to create solutions that can offer enhanced protection to our customers.
We cannot divulge the precise nature of the imminent security enhancement; should we do so we risk offering information into the public domain that could be of interest to criminal parties.
The intention is to make the security enhancement available to vehicles affected by CAN bus theft.
What models are known to be targeted by this issue and are newer models affected?
The models primarily targeted are fourth-generation Lexus RX and the Toyota RAV4.
For older models we endeavour to create solutions that can offer enhanced protection to our customers.
Since October 2022, Toyota models are subject to a platform change that negates CAN Bus theft. This excludes Hilux, which is not subject to CAN bus attacks.
When did Toyota first become aware of the vulnerability in the security systems?
It is not so much vulnerability of the security systems but more so the growing rise in criminal gangs targeting vehicles for ‘cannibalisation’ and/or complete theft.
Instances appear to have been rising significantly from 2019-2020.
There are many factors involved and at a global level. This includes parts of the world experiencing parts shortage which results in targeted thefts to supply vehicles and/or parts sent to countries experiencing trade restrictions.
Which models can be fitted with the enhanced security feature?
It can be fitted to Land Cruiser 150, RAV4 and first-generation Toyota C-HR.
When is the enhanced security upgrade going to be available and will it be free of charge?
Exact timings are still to be confirmed. We anticipate being able to advise the Toyota Centre network with full details soon. The security enhancement needs to be carried out at a Toyota Centre. Costs are under review; customers may incur a nominal charge.
Are any new models targeted by thieves?
While no car can be considered 100% immune to criminal intent, more recent models are equipped with enhanced security systems aimed at deterring CAN bus type thefts.
Given that the rise in this type or car theft has been known for several years in other countries and is growing in the UK why wasn’t I told about this?
Toyota takes the issue of car crime very seriously. To protect customers’ vehicles our approach is not to disclose our vehicle theft analysis data. The sharing of information could enable thieves to find ways to circumvent anti–theft technologies or make some models particularly attractive to some thieves and unnecessarily vulnerable to attack.
Is a Vehicle Protection Plate (VPP) available for any Toyota models?
Yes, for RAV4, excluding the Plug-In Hybrid model (which is not susceptible to CAN bus attack). The fitment is chargeable.
What is the countermeasure and what’s the plan moving forwards?
We are continuously developing technical solutions to make our vehicles more secure and reduce the risk of theft. An enhanced security hardware was introduced in October 2022 on the latest versions of the models that had previously been targeted by criminals. Since then, we have seen a significant drop-off in terms of successful thefts of those models.
Why is there no recall for vehicles susceptible to the CAN bus attack?
Recall announcements in the UK are guided by very specific guidelines as drawn up by the Driver and Vehicle Standards Agency (DVSA). To qualify as a recall, the issue must relate to a safety or thermal type issue where there is potential for injury as a result of vehicle manufacture or component failure. Only in these such circumstances can a recall be announced. In recall circumstances, the DVSA will provide manufacturers access to ownership records for purpose of communication. Instances of theft do not trigger a recall.
Will Toyota pay for damage caused by an attempted theft?
No. This will need to be addressed by the customer and the vehicle insurers. While we understand theft or attempted theft can be highly upsetting and, in some cases, a costly experience, in such instances customers are first and foremost victims of crime. Toyota does not cover costs associated with criminal activity either under the terms of the warranty or as goodwill.
What is the position with insuring affected models?
As a manufacturer, we stay close to Toyota Insurance colleagues and indeed all motor insurers. We are aware that in many cases, insurance premiums might have increased as a direct result of vehicle crime. We need to refer you to your insurer for further comment.
Hi there. Is my RAV4 Hybrid, BP21 ***; not plug in, vulnerable to CANbus theft?. Should I approach my dealership on what the best devices are available to protect my car. I love driving my car and what it offers but hate the thought that it is an easy target for thieves.
Hi there, thanks for your comment.
We can confirm that your RAV4 is affected by CANbus theft. We would recommend registering your vehicle as eligible for further precautionary measures at your local Toyota Centre.
Thanks,
Toyota UK
Hi Toyota
I had my RAV4 stolen last night (6/7th June) 19 reg
Bought in October 23, It has had two services this year, last service last Saturday, (1st June) at no time did Toyota sales staff advise the vulnerability of the car or advise any additional security devices to be fitted, they wanted to sell multiple other ‘add’ on’s, it’s easy to inform all customers with txt or email, of the situation, all owners know thieves are very proactive on finding the next vulnerability but please be brave in passing this information on quickly to owners, so individual solutions or improvements can be taken while the vulnerability is open🤔
Hi Scott, thanks for your comment.
We’re so sorry to hear that you have been a victim of this crime. We are continuously working with local authorities and others in the industry to combat the ever evolving techniques used. No doubt you have already informed your local police force, we hope your RAV4 can be recovered swiftly.
Thanks,
Toyota UK
My 2023 Hilux GR was stolen outside my house last night in SW London. Tracking doesn’t show anything. How can the Hilux be so easy to steal? It seems to be a known issue.
Hi Andrew, we’re so sorry to hear this.
Unless you have an additional vehicle tracker installed on your vehicle, the MyToyota app is not designed to track a lost vehicle. We hope your Hilux is recovered swiftly.
Toyota UK
I have insured my cars with LV for many years as they are a Which recommended insurer. They have recently contacted me to inform me that they will not renew the insurance on my 67 plate Auris as they consider it to be at high theft risk. I contacted Toyota customer relations and they have just suggested that it is not at risk of Can bus theft. They have not commented on other risks which increase theft e.g. cloning the keyless entry system or theft of the accessible exhaust cat. Please can you assist me to reduce the theft risk of my auris.
Hi Steve, thanks for your comment.
We’re sorry to hear this. We cannot confirm without the full registration number, but it is likely that your Auris is vulnerable to catalytic converter theft. This is something that your local Toyota Centre would be able to advise further on. If the vehicle is equipped with a keyless entry system, it would also be vulnerable to this type of theft. This can be deactivated at your local Toyota Centre, although a more simple precaution is keeping the keys in a faraday signal blocking pouch.
Thanks,
Toyota UK
I’m totally appalled by Jemca Bracknell. My 2021 CHR sport was stolen due to the security vulnerability /CAN bus issue on 5th March 2024. Car was retrieved due to be able to track it on the My Toyota app and recovered to Jemca Bracknell on 6th March 2024.
Jemca.Bracknell then left me for 6 weeks with no vehicle until they carried out the assessment of the required work. The courtesy vehicle I have been supplied is not of equal specification to my car, it is a small Aygo.
It is now a quarter of a year they have had my car. I am absolutely at a loss at what to do. I receive no updates on progress or timelines despite my continued effort. I have raised a formal complaint through Jemca Customer Support, yet still no one has had the courtesy to update me, although they have been given the requested time.
I will NEVER buy another Toyota. Are all Toyota customers treated with such contempt?
Hi Sarah, thanks for your comment.
We’re really sorry to hear this. We can see that you have also been in contact with our Customer Relations team here at Toyota UK. This is the best point of contact and we will update the record with these comments also. Your reference number is CASE2095724.
Thanks,
Toyota UK
I had a 2021 Hilux Invincible X stolen last week in Iver Heath. 2nd time in 3 years from same place, and exactly same spec and age vehicles. Extremely disappointed to gather that these particular Hilux’s are well known car theft targets and yet Toyota GB just keep saying: SORRY, WE HOPE YOUR CAR IS RECOVERED SOON. Now have an Isuzu and somehow feel much more secure. COME ON TOYOTA! TAKE SOME RESPONSIBILITY FOR NOT IMPROVING YOUR VEHICLE SECURITY SYSTEMS. A good start would be offering exiting owners of weakened security vehicles FREE upgrades. I am very, very disappointed. And NO! I don’t want to hear about your current offers, news and events. Grrrr!!!
Hello,
2020 rav4 dynamic reg NL20 YPU. Is this an affected model? What is Toyota recommendation with this model? Thank you.
Hi Tushar, thanks for getting in touch.
This registration number is not recognised on our system, please could you confirm.
Thanks,
Toyota UK
Hi
I’m concerned as I am purchasing a RAV4 tomorrow and now I’m reading all this stuff about CAN bus theft.
Can you please confirm if reg ET23 *** is at risk from this and if it is what should I do going forward
Hi David, thanks for your comment.
It’s great to hear that you are looking into purchasing a RAV4. This particular vehicle is not deemed as at risk of CANbus theft.
Thanks,
Toyota UK
I’m concerned as I am looking at purchasing a RAV4 and now I’m reading all this stuff about CAN bus theft.
Can you please confirm if reg RV22 *** is at risk from this and if it is what should I do going forward. Many thanks
Hi Jason, thanks for getting in touch.
We will need your full registration number in order to check. We censor the information upon publishing.
Thanks,
Toyota UK
RV22 ***
Many thanks
Hi Jason, thanks for providing the detail.
This vehicle is deemed as at risk of CANbus theft and we are currently offering Vehicle Protection Plate fitment. Your local Toyota Centre are best placed to advise further on this.
Thanks,
Toyota UK
My parents who own a RAV4 received an email from their insurer today to say they won’t be insuring the car next year specifically because of the large number of thefts. This means that those insurers that will insure it no doubt may raise their prices further to squeeze even more money out of regular people.
So has there been any progress with regards to a security enhancement? It’s really bad for customers to have to be in this situation, particularly those that are vulnerable. Are you also speaking with insurers to tell them you’re proactively sorting this problem out?
I’ve got to say there’s no mention of this problem at point of sale. If this is really a priority for you how is that months have passed and there’s still no update?
I provided a link to a video of a German car channel where the RAV4 in that video seemed to have an additional security system on it. Can you advise clearly for us all if you have indeed released security fixes in other markets for this very problem?
Kindly answer my questions.
Thank you
Hi Neo, thanks for your comment.
We’re sorry to hear this. We are currently still working on further security updates and offer a Vehicle Protection Plate for affected units of the RAV4. This is something that your local Toyota Centre is best placed to provide further information on.
We are only able to advise on the UK market and as for insurance, Toyota Insurance Services are best equipped to advise further on 0333 103 9950 or https://portal.toyotainsuranceservices.co.uk/
Thanks,
Toyota UK
Hi,
So we have the plates fitted but this isn’t necessarily going to stop someone try to steal the car and cause damage. What would be useful is if you spoke with insurance companies and told them you are working on a fix. People are with all kinds of insurance companies, not just Toyota. You have to do this or else we will always pay higher premiums. If next year the premium is too high I am going to think about selling my RAV4. It’s not worth it.
When are you expecting to release a proper fix? Can you give us an indication please?
Hi Neo, thanks for your comment.
We have no further information to provide at the moment, but part of our efforts are in working with insurance providers and others in the insdustry given it is an industry wide issue. All of the latest updates will be posted here on our Magazine.
Thanks,
Toyota UK