We take the issue of Toyota and Lexus vehicle theft very seriously. We are continuously developing technical solutions to make our vehicles more secure, to help reduce the risk of theft.
An enhanced security hardware system was introduced in October 2021 (Lexus) and October 2022 (Toyota) on the latest models targeted by criminals. Since which, we have seen a significant drop in thefts of those models.
For older models, we endeavour to create solutions that can offer enhanced protection to our customers. Following significant investments by Toyota GB, in line with that of other vehicle manufacturers, newly developed official Toyota and Lexus security hardware components will very soon be available to fit to those targeted models registered before October 2021.
Following communication from Toyota and Lexus in the coming weeks, owners should contact their local dealer to arrange fitment. Customers can already speak to their local dealer about the fitment of a protective plate to block access to the vehicle’s electronics. This is a nationwide customer care offering available on Toyota RAV4 Hybrid, Lexus RX and Lexus NX.
As a vehicle manufacturer, we can never completely eliminate the risk of vehicle theft. This is an industry-wide issue, concerning all vehicle manufacturers and affecting the most popular models first.
In order to further reduce the theft risk, we regularly collaborate and share information with insurance associations, police and law enforcement authorities, theft prevention experts and other key stakeholders around the world. This enables us to understand new threats and techniques used by thieves and develop more secured systems.
Alongside our efforts, we urge those authorities to focus on reducing the number of thefts. We would also like to see action taken that leads to the end to the online sale of devices used by criminals to steal cars without using the car keys, as these devices serve no purpose other than a criminal one.
How do thieves manage to steal cars in this manner?
The thieves disconnect part of the headlamp and use a malicious device to send signals to the control CAN bus (the communication ‘backbone’ within a car) that allow the doors to open and the car to start without the key or remote control.
Thieves need to:
- Purchase a relatively expensive rogue device (third-party ‘emergency start‘ device which costs around £2500 – £4000 each)
- Gain physical access to the vehicle’s CAN bus communication wires for an uninterrupted period.
The third-party ‘emergency start‘ device has the capability to initiate an exploit in the following manner:
- Once connected to the vehicle’s CAN bus communication wires, the third-party ‘emergency start‘ device can send a prioritised series of CAN signals to bypass the vehicle’s security and immobiliser systems, which could allow a thief to unlock the doors and turn the vehicle’s ignition ON.
- The third-party ‘emergency start’ device is then disconnected.
- At this point a thief can enter the vehicle and start the car without the key.
What is Toyota doing to prevent these types of attacks?
Toyota and Lexus take the issue of car theft very seriously. We are continuously developing technical solutions to make our vehicles more secure to help reduce the risk of theft.
In fact, in the UK market, an enhanced security hardware was introduced in October 2021 on the latest versions of the models that had previously been targeted by criminals. Since then, we have seen a significant drop-off in terms of successful thefts of those models.
For older models we endeavour to create solutions that can offer enhanced protection to our customers.
We cannot divulge the precise nature of the imminent security enhancement; should we do so we risk offering information into the public domain that could be of interest to criminal parties.
The intention is to make the security enhancement available to vehicles affected by CAN bus theft.
What models are known to be targeted by this issue and are newer models affected?
The models primarily targeted are fourth-generation Lexus RX and the Toyota RAV4.
For older models we endeavour to create solutions that can offer enhanced protection to our customers.
Since October 2022, Toyota models are subject to a platform change that negates CAN Bus theft. This excludes Hilux, which is not subject to CAN bus attacks.
When did Toyota first become aware of the vulnerability in the security systems?
It is not so much vulnerability of the security systems but more so the growing rise in criminal gangs targeting vehicles for ‘cannibalisation’ and/or complete theft.
Instances appear to have been rising significantly from 2019-2020.
There are many factors involved and at a global level. This includes parts of the world experiencing parts shortage which results in targeted thefts to supply vehicles and/or parts sent to countries experiencing trade restrictions.
Which models can be fitted with the enhanced security feature?
It can be fitted to Land Cruiser 150, RAV4 and first-generation Toyota C-HR.
When is the enhanced security upgrade going to be available and will it be free of charge?
Exact timings are still to be confirmed. We anticipate being able to advise the Toyota Centre network with full details soon. The security enhancement needs to be carried out at a Toyota Centre. Costs are under review; customers may incur a nominal charge.
Are any new models targeted by thieves?
While no car can be considered 100% immune to criminal intent, more recent models are equipped with enhanced security systems aimed at deterring CAN bus type thefts.
Given that the rise in this type or car theft has been known for several years in other countries and is growing in the UK why wasn’t I told about this?
Toyota takes the issue of car crime very seriously. To protect customers’ vehicles our approach is not to disclose our vehicle theft analysis data. The sharing of information could enable thieves to find ways to circumvent anti–theft technologies or make some models particularly attractive to some thieves and unnecessarily vulnerable to attack.
Is a Vehicle Protection Plate (VPP) available for any Toyota models?
Yes, for RAV4, excluding the Plug-In Hybrid model (which is not susceptible to CAN bus attack). The fitment is chargeable.
What is the countermeasure and what’s the plan moving forwards?
We are continuously developing technical solutions to make our vehicles more secure and reduce the risk of theft. An enhanced security hardware was introduced in October 2022 on the latest versions of the models that had previously been targeted by criminals. Since then, we have seen a significant drop-off in terms of successful thefts of those models.
Why is there no recall for vehicles susceptible to the CAN bus attack?
Recall announcements in the UK are guided by very specific guidelines as drawn up by the Driver and Vehicle Standards Agency (DVSA). To qualify as a recall, the issue must relate to a safety or thermal type issue where there is potential for injury as a result of vehicle manufacture or component failure. Only in these such circumstances can a recall be announced. In recall circumstances, the DVSA will provide manufacturers access to ownership records for purpose of communication. Instances of theft do not trigger a recall.
Will Toyota pay for damage caused by an attempted theft?
No. This will need to be addressed by the customer and the vehicle insurers. While we understand theft or attempted theft can be highly upsetting and, in some cases, a costly experience, in such instances customers are first and foremost victims of crime. Toyota does not cover costs associated with criminal activity either under the terms of the warranty or as goodwill.
What is the position with insuring affected models?
As a manufacturer, we stay close to Toyota Insurance colleagues and indeed all motor insurers. We are aware that in many cases, insurance premiums might have increased as a direct result of vehicle crime. We need to refer you to your insurer for further comment.
Hi,
I have put a deposit on a 2021 RAV from a main dealer last weekend and they informed me that I would have to pay £100 to get the protection plate fitted as it was not their responsibility to update security. This appears not very reasonable given that this is a known defect. I don’t understand why the quoted price of £70 on this chat has now risen to £100 – it appears to be easy money for the dealer who claimed this was ‘cost price’.
Can Toyota UK provide verification why this is a customers responsibility to get an approved used car to a minimum security standard? Also can Toyota confirm what actual pice is for the cover plate?
Hi there, thanks for getting in touch.
We’re sorry to hear this. Please contact the Customer Support team via email at cr@toyota.co.uk for further assistance with this.
Thanks,
Toyota UK
I received a quote of over £150 from my Toyota dealer to install this cover plate after had my vehicle recovered from theft, this prices are just not making any sense from the dealers, and i am not even sure how more secure this will be with the metal plate. I am definitely getting a top market steering wheel lock, bright visible.
Hello Toyota
Since your statement above dated 13 March 2024 I don’t think we’ve heard anything. Can you give an update please on the proposed modifications, when these will be announced and when available at dealers?
After one theft last year and another attempted theft this year I’m going to have to sell my ’21 plate RAV4 unless tangible measures are available very soon. Pity as it’s an otherwise first class vehicle.
Hi Robin, thanks for your comment.
We are currently offering Vehicle Protection Plates for affected RAV4 models and your local Toyota Centre can assist with this. We are working on further measures, but have no update at this time.
Thanks,
Toyota UK
Hi Toyota Team,
Please could you advise if my 22 RAV4 Design (FP22 ***) is at risk of CANBUS theft?
Many Thanks
Hi Jon, thanks for getting in touch.
Your RAV4 is not deemed as at risk of CANbus theft.
Thanks,
Toyota UK
Hi Toyota
Thank you for keeping us owners informed of this
Could I ask if my 2014 model year RAV is affected? Thank you in advance
Hi Adam, thanks for getting in touch.
Your RAV4 will not be at risk of CANbus theft.
Thanks,
Toyota UK
Toyota Customer Service
My RAV4 GY72 … has protection plates fitted – but the other night thieves still tried to break-in through the L/H (nearside) wheel arch, and it was only because I heard the sound of the trim being popped off that I was able to disturb them and call the police.
Does this model already have any other additional security update measures in place?
Can you confirm that it is or is not possible for thieves to access the CAN bus thingy – from either side? Depending on your reply, I can decide which side of the street to park the car in future.
Thanks Vincent.
Hi Vincent, thanks for getting in touch.
We’re sorry to hear that your RAV4 has been targeted. The Vehicle Protection Plate helps to act as a block to the CANbus system, but it cannot completely eradicate the threat and the system can be accessed from both sides on this vehicle. We would recommend also getting in touch with your Toyota Centre to get a Tracker system fitted.
Thanks,
Toyota UK
Thanks for your quick response to my email today.
Most owners with this problem report that thieves attempting CANbus hi-jacking use the L/H side (nearside) to gain access to the headlight wiring.
Is there any particular reason that you know of for this “preference” ?
Thanks again.
When is Toyota going to communicate with customer’s whose vehicles are at risk of CAN Bus theft? Our Toyota RAV4 was stolen in July 2022 using this method. At the time we were completely unaware of the vulnerability of our vehicle. If Toyota had communicated with us as outlined above, we could have taken mitigating action to secure our vehicle.
Hi Janette, thanks for getting in touch.
We’re sorry to hear that your RAV4 was a victim of theft. CANbus hacking is a new format of vehicle theft that has come to recognition within the last year or so. Sadly vehicle crime is always prevalent, especially with high value models such as the RAV4. We do not have access to the customer details of every affected vehicle owner, but have been open in discussions where possible.
Thanks,
Toyota UK
I would dispute that you have been open in discussions as our vehicle has been into a Toyota service centre twice since the date of your statement re vehicle theft. On neither occasion did anyone take the opportunity to enlighten us as to the vulnerability of our vehicle.
Completely agree. Our car was taken from our drive 2 nights ago using this method and it’s only through reading this thread that we even understand how they were able to do it.
4 years of servicing through official Toyota garages and the vulnerability or options to prevent were never once mentioned! So frustrating.
My Rav 4 was stolen last week after having only bought it from Macclesfield Toyota two months ago. The number plate is LC69 ***. Why was I not informed of this by toyota Macclesfield when I bought the car, I would have paid for the protection plate and anything else such as ghost mobiliser etc immediately. They offered me three-year tire warranty and dent warranty but nothing about security.
Hi Cyrus, thanks for your message.
Unfortunately, this is an issue that the entire automotive industry is facing. Due to the scale of the issue, individual communication has been challenging, but we are working diligently to address the situation and will keep all our customers updated through the most efficient means available.
Please accept our apologies for any distress this may have caused. We are committed to resolving this issue promptly.
Thanks,
Toyota UK
I had my RAV 4 Hybrid stolen on June 15th 2024 by thieves by getting control of the car via the headlight. I had a tracker on the car so recovered the car 2 weeks later. In those 2 weeks they changed all the VIN numbers including the one under the driver seat which is etched on the car chassis. I took the car to my nearest Toyota dealership “Hills of Woodford Toyota” in Woodford Green. They still have the car and its been 3 months without the car. “Hills of Woodford” are saying that Toyota are working on how to correct the VIN number on the chassis – “They have no solution ” ! My insurance company are waiting on me for the estimate for all the repairs. It’s very disappointing and it’s getting to point that I will go back to the insurance company and say Toyota can’t get this fixed and the car will be a write off ! I’ll never be a customer of Toyota again , a customer of 20 years -4 cars.
Hi Sabu, thanks for your message.
We’re really sorry to hear this. Please could you send an email to cr@toyota.co.uk so our Vehicle Theft Team can take a closer look for you.
Thanks,
Toyota UK
My insurers LV have just informed me that they will not renew cover, for my RAV4, citing too many thefts of this make of vehicle.
Hi Rauf, thanks for getting in touch.
Toyota Insurance Services can assist with an insurance quote, they are best contacted on 0333 103 9950 or https://portal.toyotainsuranceservices.co.uk/
Thanks,
Toyota UK
My insurance company has recently refused to insure my “Toyota Auris Hybrid Icon plus Auto”, saying that there has been a large increase in the number and cost of claims. I have, to date, not experienced such a problem, however, if you accept this, is there anything that I can do to reduce this risk?
Hello Peter,
Thanks for your comment.
Just to clarify, the Auris does not have the technology that enables CAN bus theft.
As we’re sure you can appreciate, we cannot comment on the exact reasoning and decisions made by third party insurance providers.
However, we are aware that the Auris has been a target for catalytic converter thieves.
We understand that the recycling value of catalytic converters is the primary attraction to thieves because it contains precious metals such as rhodium, platinum and palladium.
A CATLOC may be available for your Auris if you would like enhanced protection, but to confirm this we will need your vehicle registration.
Thank you.