We take the issue of Toyota and Lexus vehicle theft very seriously. We are continuously developing technical solutions to make our vehicles more secure, to help reduce the risk of theft.
An enhanced security hardware system was introduced in October 2021 (Lexus) and October 2022 (Toyota) on the latest models targeted by criminals. Since which, we have seen a significant drop in thefts of those models.
For older models, we endeavour to create solutions that can offer enhanced protection to our customers. Following significant investments by Toyota GB, in line with that of other vehicle manufacturers, newly developed official Toyota and Lexus security hardware components will very soon be available to fit to those targeted models registered before October 2021.
Following communication from Toyota and Lexus in the coming weeks, owners should contact their local dealer to arrange fitment. Customers can already speak to their local dealer about the fitment of a protective plate to block access to the vehicle’s electronics. This is a nationwide customer care offering available on Toyota RAV4 Hybrid, Lexus RX and Lexus NX.
As a vehicle manufacturer, we can never completely eliminate the risk of vehicle theft. This is an industry-wide issue, concerning all vehicle manufacturers and affecting the most popular models first.
In order to further reduce the theft risk, we regularly collaborate and share information with insurance associations, police and law enforcement authorities, theft prevention experts and other key stakeholders around the world. This enables us to understand new threats and techniques used by thieves and develop more secured systems.
Alongside our efforts, we urge those authorities to focus on reducing the number of thefts. We would also like to see action taken that leads to the end to the online sale of devices used by criminals to steal cars without using the car keys, as these devices serve no purpose other than a criminal one.
How do thieves manage to steal cars in this manner?
The thieves disconnect part of the headlamp and use a malicious device to send signals to the control CAN bus (the communication ‘backbone’ within a car) that allow the doors to open and the car to start without the key or remote control.
Thieves need to:
- Purchase a relatively expensive rogue device (third-party ‘emergency start‘ device which costs around £2500 – £4000 each)
- Gain physical access to the vehicle’s CAN bus communication wires for an uninterrupted period.
The third-party ‘emergency start‘ device has the capability to initiate an exploit in the following manner:
- Once connected to the vehicle’s CAN bus communication wires, the third-party ‘emergency start‘ device can send a prioritised series of CAN signals to bypass the vehicle’s security and immobiliser systems, which could allow a thief to unlock the doors and turn the vehicle’s ignition ON.
- The third-party ‘emergency start’ device is then disconnected.
- At this point a thief can enter the vehicle and start the car without the key.
What is Toyota doing to prevent these types of attacks?
Toyota and Lexus take the issue of car theft very seriously. We are continuously developing technical solutions to make our vehicles more secure to help reduce the risk of theft.
In fact, in the UK market, an enhanced security hardware was introduced in October 2021 on the latest versions of the models that had previously been targeted by criminals. Since then, we have seen a significant drop-off in terms of successful thefts of those models.
For older models we endeavour to create solutions that can offer enhanced protection to our customers.
We cannot divulge the precise nature of the imminent security enhancement; should we do so we risk offering information into the public domain that could be of interest to criminal parties.
The intention is to make the security enhancement available to vehicles affected by CAN bus theft.
What models are known to be targeted by this issue and are newer models affected?
The models primarily targeted are fourth-generation Lexus RX and the Toyota RAV4.
For older models we endeavour to create solutions that can offer enhanced protection to our customers.
Since October 2022, Toyota models are subject to a platform change that negates CAN Bus theft. This excludes Hilux, which is not subject to CAN bus attacks.
When did Toyota first become aware of the vulnerability in the security systems?
It is not so much vulnerability of the security systems but more so the growing rise in criminal gangs targeting vehicles for ‘cannibalisation’ and/or complete theft.
Instances appear to have been rising significantly from 2019-2020.
There are many factors involved and at a global level. This includes parts of the world experiencing parts shortage which results in targeted thefts to supply vehicles and/or parts sent to countries experiencing trade restrictions.
Which models can be fitted with the enhanced security feature?
It can be fitted to Land Cruiser 150, RAV4 and first-generation Toyota C-HR.
When is the enhanced security upgrade going to be available and will it be free of charge?
Exact timings are still to be confirmed. We anticipate being able to advise the Toyota Centre network with full details soon. The security enhancement needs to be carried out at a Toyota Centre. Costs are under review; customers may incur a nominal charge.
Are any new models targeted by thieves?
While no car can be considered 100% immune to criminal intent, more recent models are equipped with enhanced security systems aimed at deterring CAN bus type thefts.
Given that the rise in this type or car theft has been known for several years in other countries and is growing in the UK why wasn’t I told about this?
Toyota takes the issue of car crime very seriously. To protect customers’ vehicles our approach is not to disclose our vehicle theft analysis data. The sharing of information could enable thieves to find ways to circumvent anti–theft technologies or make some models particularly attractive to some thieves and unnecessarily vulnerable to attack.
Is a Vehicle Protection Plate (VPP) available for any Toyota models?
Yes, for RAV4, excluding the Plug-In Hybrid model (which is not susceptible to CAN bus attack). The fitment is chargeable.
What is the countermeasure and what’s the plan moving forwards?
We are continuously developing technical solutions to make our vehicles more secure and reduce the risk of theft. An enhanced security hardware was introduced in October 2022 on the latest versions of the models that had previously been targeted by criminals. Since then, we have seen a significant drop-off in terms of successful thefts of those models.
Why is there no recall for vehicles susceptible to the CAN bus attack?
Recall announcements in the UK are guided by very specific guidelines as drawn up by the Driver and Vehicle Standards Agency (DVSA). To qualify as a recall, the issue must relate to a safety or thermal type issue where there is potential for injury as a result of vehicle manufacture or component failure. Only in these such circumstances can a recall be announced. In recall circumstances, the DVSA will provide manufacturers access to ownership records for purpose of communication. Instances of theft do not trigger a recall.
Will Toyota pay for damage caused by an attempted theft?
No. This will need to be addressed by the customer and the vehicle insurers. While we understand theft or attempted theft can be highly upsetting and, in some cases, a costly experience, in such instances customers are first and foremost victims of crime. Toyota does not cover costs associated with criminal activity either under the terms of the warranty or as goodwill.
What is the position with insuring affected models?
As a manufacturer, we stay close to Toyota Insurance colleagues and indeed all motor insurers. We are aware that in many cases, insurance premiums might have increased as a direct result of vehicle crime. We need to refer you to your insurer for further comment.
Hi, I purchased my C-HR Dynamic on 1st March 2017 and intend to keep it for a few more years.
Is it eligible for the modification to protect access to the CAN bus?
If it’s subject to a nominal charge, how much is it likely to be?
Hi there, thanks for your comment.
We will need your full registration number in order to confirm the level of threat to your Toyota C-HR. We do not currently offer precautionary measures for this vehicle, but it is something we are working on.
Thanks,
Toyota UK
Hi, I don’t think it’s acceptable that 3 months on from the original statement and 2 months after you were expecting to have shared information with dealers the best we can expect is keep checking while we work on it.
It appears the statement was put out in the aftermath of the Watchdog programme for good optics. I have shared this statement with them and asked them to note all the comments too!
I have the plates fitted but have had an attempted theft via CAN BUS that has resulted in damage to the car which required repairs out of my own pocket.
Had I been made aware of the issue by the authorised dealer when I purchased I wouldn’t have bought the damn thing. Additionally even when I went to get the plates fitted the dealership played dumb and pretended they were not aware of the issue.
I very much look forward to a group claims in the future in relation to consumer rights legislation.
Kiran
Hello Kiran,
We are very sorry for the frustration this is causing.
Please be assured that this is a matter we are taking very seriously, and we are currently working on further security enhancements.
However, ultimately, you have been the victim of a crime, Toyota does not cover costs associated with criminal activity either under the terms of the warranty or as goodwill.
Once again, we apologise for the frustration this has caused.
Thank you.
Hi looking to possibly by a Rav4 2019 onwards but the theft issue is putting me off, is there an update as to what has been done/will be done if I do purchase one?
Hi Jason,
Thanks for your question.
Please be assured that we are currently working on further security enhancements, but unfortunately do have no update to offer at the moment.
A Vehicle Protection Plate is available for the RAV4, so this is also an option for enhanced vehicle security.
We hope this helps.
Thanks.
I purchased a second hand Toyota Rav 4×4 (2020) 6w ago and had an anti-theft plate fitted by the dealer a week later.
Unfortunately I had the car stolen this week I believe by access to the CAN system (I have CCTV footage). The whole process took about 2 minutes before the thieves drove off in the vehicle. Obviously disappointed that the anti- theft plate made no difference. I shall inform the Toyota dealer but just wanted to make everyone aware of the issue
Hi John,
We are so sorry to hear that you have been a victim of this horrible crime and for the distress this has caused.
Please be assured that we are constantly working on enhancing our security features on our vehicles.
We trust that the police and your insurance company are now working closely with you to resolve this matter and minimise any further inconvenience.
Once again, we are truly sorry that you have been affected by this horrible crime.
Thanks.
These vehicles are simply computers on wheels. How have you not yet implemented 2-factor authentication on the CAN system, linked to the owners mobile phone? (like every other computer security)
Hi Rob, thanks for your feedback on this.
We are currently working on further security measures and will pass your suggestions along to our team.
Thanks,
Toyota UK
Hello,
My Toyota chr 2022 was stolen a couple days ago I was able to track it and receive it back via Toyota my app! However there is now a hybrid system malfunction on the board from where it was hacked I believe.
I am not in the uk atm but can you advise what to do! I read this happened to someone on Reddit and they were able to get it sorted out quickly and for free at their Toyota garage. It was a simple reset of the system.
Also would my car be available for the CAN system!
If not installed already 0y22 *** is the reg.
What other software can be used to ensure cars are not stolen it is frustrating.
If you can advise
Hi Henrietta, thanks for getting in touch.
We are so sorry to hear that your Toyota C-HR was a target of CANbus theft. Your local Toyota Centre is best placed to take a look at the Hybrid system malfunction warning. Whilst we do not have any information to provide on the further security updates at the moment, it is something that we are working on.
Thanks,
Toyota UK
Why don’t you fit alarms any more you used to
Also if you made keyless entry optional I’m sure most customers would not choose it and opt for a secure vehicle
I have a 2019 rav and a 2021 hilux and definitely won’t buy another Toyota until you install the same level of security that you did on previous models
Hi Ben, thanks for your comment.
Each model has a different security system. We are working on enhancing this across the whole model line up and further information will be confirmed soon.
Thanks,
Toyota UK
Is this issues already fixed in the new vehicle 2022-2025??
Hi Cristy, thanks for your comment.
Each vehicle has a different risk level, we would need the registration number to check the status.
Thanks,
Toyota UK
Our Rav4 (2020 plate) was stolen last night from outside our house. We believe it was done via the CAN system. We bought the car 6 weeks ago from JEMCA Sidcup. We were told that it had been fitted with a theft plate. This clearly made no difference at all.
As a main Toyota dealership, JEMCA Sidcup made no mention of the vulnerability of Rav4’s and how they are being targeted through the CAN system and how this has been known for a few years now. We have been actively mis-sold a Toyota vehicle. This is completely unacceptable not only from a dealership point of view but also from a corporation point of view. Toyota should take full responsibility for vehicles that are clearly have a design fault in their security system.
Even if this is a criminal matter, it is not for the owners to bear this brunt of this flaw in terms of costs, stress, raised insurance claims etc etc.
Hi Emma, thanks for getting in touch.
We are so sorry to hear that your RAV4 has been a victim of CANbus theft. We are currently working on further security enhancements and hope to have updates in due course. Vehicle theft is something that has always been rife, especially for high ticket value vehicles, it is a case of the methods in which the vehicles are stolen that change over the years.
Thanks,
Toyota UK
I had exactly the same issue (comment posted 20/6)
The anti theft plates made absolutely no difference to thieves – they stole the car in under 4min . I would be reluctant to buy Toyota Rav again and would caution anyone else.
John Cooper
Problems happen to everyone, case only is how do we handle them.
We are just going to change the car, chose Lexus for the first time. By chance only found some video how cars gets stolen in this way.
We asked dealer.. was pretending (body language, not willing to look, suggesting video was fabricated) that doesn’t know anything about this. When shared this link.. didn’t answer. I tried to ask you if in current models issue was resolved.. post was blocked by the moderation process. This says a lot.. so neither Lexus nor Toyota. FYI as this message I dont expect at all to be published.
Hi Lex, we’re sorry to hear this.
If you let us know your contact details and name of the Toyota Centre, we can raise this with them directly.
Thanks,
Toyota UK
Thank you for the feedback!
As this is about Lexus dealer in USA I don’t expect you could help.
But you might be able to confirm if this vulnerability was already resolved in Lexus NX 2025, Lexus RX 2024 what we still consider as an option for us?
If was resolved.. was using any protection plates limiting an access to connectors or by redesigned security?
No problem at all.
That’s correct, we’d only be able to advise on the UK market as each specification is different.
Thanks
Hello can you tell me if my C HR is liable to this can bus attack
reg RK68 ***
Hi Mark, thanks for getting in touch.
Unfortunately your Toyota C-HR is at risk of CANbus theft. Whilst we are working on further security enhancements, we do not have any information to offer at this time. We would recommend looking into precautionary measures such as steering/gear/pedal locks to deter theives.
Thanks,
Toyota UK