We take the issue of Toyota and Lexus vehicle theft very seriously. We are continuously developing technical solutions to make our vehicles more secure, to help reduce the risk of theft.
An enhanced security hardware system was introduced in October 2021 (Lexus) and October 2022 (Toyota) on the latest models targeted by criminals. Since which, we have seen a significant drop in thefts of those models.
For older models, we endeavour to create solutions that can offer enhanced protection to our customers. Following significant investments by Toyota GB, in line with that of other vehicle manufacturers, newly developed official Toyota and Lexus security hardware components will very soon be available to fit to those targeted models registered before October 2021.
Following communication from Toyota and Lexus in the coming weeks, owners should contact their local dealer to arrange fitment. Customers can already speak to their local dealer about the fitment of a protective plate to block access to the vehicle’s electronics. This is a nationwide customer care offering available on Toyota RAV4 Hybrid, Lexus RX and Lexus NX.
As a vehicle manufacturer, we can never completely eliminate the risk of vehicle theft. This is an industry-wide issue, concerning all vehicle manufacturers and affecting the most popular models first.
In order to further reduce the theft risk, we regularly collaborate and share information with insurance associations, police and law enforcement authorities, theft prevention experts and other key stakeholders around the world. This enables us to understand new threats and techniques used by thieves and develop more secured systems.
Alongside our efforts, we urge those authorities to focus on reducing the number of thefts. We would also like to see action taken that leads to the end to the online sale of devices used by criminals to steal cars without using the car keys, as these devices serve no purpose other than a criminal one.
How do thieves manage to steal cars in this manner?
The thieves disconnect part of the headlamp and use a malicious device to send signals to the control CAN bus (the communication ‘backbone’ within a car) that allow the doors to open and the car to start without the key or remote control.
Thieves need to:
- Purchase a relatively expensive rogue device (third-party ‘emergency start‘ device which costs around £2500 – £4000 each)
- Gain physical access to the vehicle’s CAN bus communication wires for an uninterrupted period.
The third-party ‘emergency start‘ device has the capability to initiate an exploit in the following manner:
- Once connected to the vehicle’s CAN bus communication wires, the third-party ‘emergency start‘ device can send a prioritised series of CAN signals to bypass the vehicle’s security and immobiliser systems, which could allow a thief to unlock the doors and turn the vehicle’s ignition ON.
- The third-party ‘emergency start’ device is then disconnected.
- At this point a thief can enter the vehicle and start the car without the key.
What is Toyota doing to prevent these types of attacks?
Toyota and Lexus take the issue of car theft very seriously. We are continuously developing technical solutions to make our vehicles more secure to help reduce the risk of theft.
In fact, in the UK market, an enhanced security hardware was introduced in October 2021 on the latest versions of the models that had previously been targeted by criminals. Since then, we have seen a significant drop-off in terms of successful thefts of those models.
For older models we endeavour to create solutions that can offer enhanced protection to our customers.
We cannot divulge the precise nature of the imminent security enhancement; should we do so we risk offering information into the public domain that could be of interest to criminal parties.
The intention is to make the security enhancement available to vehicles affected by CAN bus theft.
What models are known to be targeted by this issue and are newer models affected?
The models primarily targeted are fourth-generation Lexus RX and the Toyota RAV4.
For older models we endeavour to create solutions that can offer enhanced protection to our customers.
Since October 2022, Toyota models are subject to a platform change that negates CAN Bus theft. This excludes Hilux, which is not subject to CAN bus attacks.
When did Toyota first become aware of the vulnerability in the security systems?
It is not so much vulnerability of the security systems but more so the growing rise in criminal gangs targeting vehicles for ‘cannibalisation’ and/or complete theft.
Instances appear to have been rising significantly from 2019-2020.
There are many factors involved and at a global level. This includes parts of the world experiencing parts shortage which results in targeted thefts to supply vehicles and/or parts sent to countries experiencing trade restrictions.
Which models can be fitted with the enhanced security feature?
It can be fitted to Land Cruiser 150, RAV4 and first-generation Toyota C-HR.
When is the enhanced security upgrade going to be available and will it be free of charge?
Exact timings are still to be confirmed. We anticipate being able to advise the Toyota Centre network with full details soon. The security enhancement needs to be carried out at a Toyota Centre. Costs are under review; customers may incur a nominal charge.
Are any new models targeted by thieves?
While no car can be considered 100% immune to criminal intent, more recent models are equipped with enhanced security systems aimed at deterring CAN bus type thefts.
Given that the rise in this type or car theft has been known for several years in other countries and is growing in the UK why wasn’t I told about this?
Toyota takes the issue of car crime very seriously. To protect customers’ vehicles our approach is not to disclose our vehicle theft analysis data. The sharing of information could enable thieves to find ways to circumvent anti–theft technologies or make some models particularly attractive to some thieves and unnecessarily vulnerable to attack.
Is a Vehicle Protection Plate (VPP) available for any Toyota models?
Yes, for RAV4, excluding the Plug-In Hybrid model (which is not susceptible to CAN bus attack). The fitment is chargeable.
What is the countermeasure and what’s the plan moving forwards?
We are continuously developing technical solutions to make our vehicles more secure and reduce the risk of theft. An enhanced security hardware was introduced in October 2022 on the latest versions of the models that had previously been targeted by criminals. Since then, we have seen a significant drop-off in terms of successful thefts of those models.
Why is there no recall for vehicles susceptible to the CAN bus attack?
Recall announcements in the UK are guided by very specific guidelines as drawn up by the Driver and Vehicle Standards Agency (DVSA). To qualify as a recall, the issue must relate to a safety or thermal type issue where there is potential for injury as a result of vehicle manufacture or component failure. Only in these such circumstances can a recall be announced. In recall circumstances, the DVSA will provide manufacturers access to ownership records for purpose of communication. Instances of theft do not trigger a recall.
Will Toyota pay for damage caused by an attempted theft?
No. This will need to be addressed by the customer and the vehicle insurers. While we understand theft or attempted theft can be highly upsetting and, in some cases, a costly experience, in such instances customers are first and foremost victims of crime. Toyota does not cover costs associated with criminal activity either under the terms of the warranty or as goodwill.
What is the position with insuring affected models?
As a manufacturer, we stay close to Toyota Insurance colleagues and indeed all motor insurers. We are aware that in many cases, insurance premiums might have increased as a direct result of vehicle crime. We need to refer you to your insurer for further comment.
My canbus plates are being fitted next week whilst RAV4 is in for its service. Will Toyota Uk or my main dealer be contacting me , as and when further security products/ software is available to further enhance my vehicles security? I had no contact about canbus protection plates and only found out about them through a Toyota RAV4 forum I’m on.
Hi Paul,
Thanks for your comment.
We will be able to contact you in April when this is available.
Please may we take your vehicle registration so that we can process this.
Thanks.
I have a 2008 LX600HL
The reg is LB08 CWZ
An older model I know but wondered if it is at risk?
Hi James,
Thanks for your question.
While no car can be considered 100% immune to criminal intent, your LS is not impacted as the technology that enables CAN bus theft isn’t in this vehicle.
Please let us know if you have any further questions.
Thanks.
I think it’s a disgrace that the above statement states the customers ‘may incur’ a cost when it’s a design fault with the scumbags are taking advantage of.
Additionally did Toyota not get ahead of this rather than it come out via BBC one show watchdog!
In the last couple of years my faith in Toyota seems to be dropping.
I refuse to pay for some metal plates which Toyota need to pay for and additionally but this is a disgrace by Toyota and their dealers not making me aware of this vulnerability when I recently brought within thr last 2 months. Having done research online this is an issue which Toyota have know for years.
Toyota is just like every other manufacturer now.. money grabbing and no customer service.
Although you say the phev’s are not subject to theft, how come my dealer had to fit a metal plate over the canbus on my 73 plate rav4 phev dynamic?
Hello Peter,
Thanks for your comment.
Please may we take your vehicle registration so we can investigate this.
Thanks.
WJ73SWY. Snows Toyota were extremely good about the problem. Can’t fault their commitment to great customer service.
Hi Peter,
Thank you for confirming.
We have sent you an email to discuss further.
Thanks.
I have had canbus security plates fitted, is there an additional security enhancement I can request for my vehicle (2019 RAV4 Dynamic)?
Hi Gill,
Newly developed official Toyota security hardware components will be available very soon.
The exact timings of the security enhancement are still to be confirmed, we anticipate being able to advise Centres with full details before the end of April.
If you would like us to contact you when these are available, please may we take your vehicle registration so that we may do so.
Thanks.
I’ve just contacted my dealer as my 2022 RAV4 phev is going in for a recall on another matter in a few days. The dealer stated that they are awaiting instruction from Toyota and are not currently fitting can bus plates.
So Toyota…..this is directly at odds with your statement above that “customers should contact their local dealer about having can bus plate fitted”. Please could I have an urgent answer on this as my RAV4 will be parked up near Heathrow all next week and I’m now very concerned that it won’t be there when I get back!!
Hi Colin,
Thanks for your comment.
As stated in the article, the RAV4 Plug-in is not susceptible to CAN bus attack.
We hope this helps, please let us know if there is anything else that we can help you with.
Thanks.
I have just booked my Toyota in for the enhanced security feature to be fitted, but I have been advised that there will probably be a charge for this. Surely Toyota wouldn’t put its customers through additional costs due to the lack of security to begin with, and knowledge of this affecting people in other countries?
When you state Rav4 hybrid is the HEV and PHEV
Hi Simon,
Thanks for your question.
The RAV4 Plug-in is not susceptible to CAN bus attack.
Please let us know if there is anything else that we can assist you with.
Thanks.
Hi Lexus . I purchased a new 2023 model ux in January 2024. I recieved a letter as my renewal with Lexus motor insurance is due now stating they are unable to continue with cover unless cat 2/tassa immobiliser is fitted, i reached out to my dealer and they were unaware of anything and couldn’t help and said speak to LMi . I’m now having additional immobiliser fitted … raised my concerns with customer relations and awaiting reply… thanks Lexus i pay in full for a new car and no offers of help.🤨, only for a sorry!!! Not what i expect from a brand that i have been loyal to for over 10 years.
One extremely unhappy, stressed customer who is quickly losing faith in the brand.
Hi Lee,
Thanks for your comment.
We can only apologise for the distress and frustration this situation has caused so far.
Please be assured that our Customer Relations team are best placed to investigate this matter and assist you further, so please continue to liaise with them on this.
If there is anything else that we can assist you with at this time, please let us know.
Once again, we are really sorry for the distress this has caused and we hope that this is resolved for you in a timely manner.
Thanks.
Hi I have a 2021 gen 5 rav 4 (registered January 22) I have spoken to my dealer and had to bring it to their attention yes they will fit it but at a cost and they can’t tell me when it will be fitted. Can the security enhancement be done at the same time please
Hi Lisa,
Please may you provide your vehicle registration so we can assist you with this.
Thanks.
Hi
My rx450h gen 4 is booked into my local Lexus dealer to have the protection plates fitted next week.
I had to find out about this known issue from a friend NOT Lexus, I have my car serviced at the same dealer each year and they never once rang me and offered this service of protecting my car with these plates.
You should be proactively contacting owners and getting them booked in ASAP
Not just waiting for THEM to ring Lexus
That’s not the service I would expect from Lexus
So my next question is after I’ve had the protection plates fitted will Lexus bother to notify us loyal customers when the next security upgrade will be available or do we have wait and find out via grapevine or various forums.
I propose you contact you customers personally, will you advise please
Many thanks
Hi Paul,
Thank you for taking the time to provide this feedback.
Please may we take your vehicle registration so that we can process a request for you to be contacted when the security enhancement is available.
Thank you.