We take the issue of Toyota and Lexus vehicle theft very seriously. We are continuously developing technical solutions to make our vehicles more secure, to help reduce the risk of theft.
An enhanced security hardware system was introduced in October 2021 (Lexus) and October 2022 (Toyota) on the latest models targeted by criminals. Since which, we have seen a significant drop in thefts of those models.
For older models, we endeavour to create solutions that can offer enhanced protection to our customers. Following significant investments by Toyota GB, in line with that of other vehicle manufacturers, newly developed official Toyota and Lexus security hardware components will very soon be available to fit to those targeted models registered before October 2021.
Following communication from Toyota and Lexus in the coming weeks, owners should contact their local dealer to arrange fitment. Customers can already speak to their local dealer about the fitment of a protective plate to block access to the vehicle’s electronics. This is a nationwide customer care offering available on Toyota RAV4 Hybrid, Lexus RX and Lexus NX.
As a vehicle manufacturer, we can never completely eliminate the risk of vehicle theft. This is an industry-wide issue, concerning all vehicle manufacturers and affecting the most popular models first.
In order to further reduce the theft risk, we regularly collaborate and share information with insurance associations, police and law enforcement authorities, theft prevention experts and other key stakeholders around the world. This enables us to understand new threats and techniques used by thieves and develop more secured systems.
Alongside our efforts, we urge those authorities to focus on reducing the number of thefts. We would also like to see action taken that leads to the end to the online sale of devices used by criminals to steal cars without using the car keys, as these devices serve no purpose other than a criminal one.
How do thieves manage to steal cars in this manner?
The thieves disconnect part of the headlamp and use a malicious device to send signals to the control CAN bus (the communication ‘backbone’ within a car) that allow the doors to open and the car to start without the key or remote control.
Thieves need to:
- Purchase a relatively expensive rogue device (third-party ‘emergency start‘ device which costs around £2500 – £4000 each)
- Gain physical access to the vehicle’s CAN bus communication wires for an uninterrupted period.
The third-party ‘emergency start‘ device has the capability to initiate an exploit in the following manner:
- Once connected to the vehicle’s CAN bus communication wires, the third-party ‘emergency start‘ device can send a prioritised series of CAN signals to bypass the vehicle’s security and immobiliser systems, which could allow a thief to unlock the doors and turn the vehicle’s ignition ON.
- The third-party ‘emergency start’ device is then disconnected.
- At this point a thief can enter the vehicle and start the car without the key.
What is Toyota doing to prevent these types of attacks?
Toyota and Lexus take the issue of car theft very seriously. We are continuously developing technical solutions to make our vehicles more secure to help reduce the risk of theft.
In fact, in the UK market, an enhanced security hardware was introduced in October 2021 on the latest versions of the models that had previously been targeted by criminals. Since then, we have seen a significant drop-off in terms of successful thefts of those models.
For older models we endeavour to create solutions that can offer enhanced protection to our customers.
We cannot divulge the precise nature of the imminent security enhancement; should we do so we risk offering information into the public domain that could be of interest to criminal parties.
The intention is to make the security enhancement available to vehicles affected by CAN bus theft.
What models are known to be targeted by this issue and are newer models affected?
The models primarily targeted are fourth-generation Lexus RX and the Toyota RAV4.
For older models we endeavour to create solutions that can offer enhanced protection to our customers.
Since October 2022, Toyota models are subject to a platform change that negates CAN Bus theft. This excludes Hilux, which is not subject to CAN bus attacks.
When did Toyota first become aware of the vulnerability in the security systems?
It is not so much vulnerability of the security systems but more so the growing rise in criminal gangs targeting vehicles for ‘cannibalisation’ and/or complete theft.
Instances appear to have been rising significantly from 2019-2020.
There are many factors involved and at a global level. This includes parts of the world experiencing parts shortage which results in targeted thefts to supply vehicles and/or parts sent to countries experiencing trade restrictions.
Which models can be fitted with the enhanced security feature?
It can be fitted to Land Cruiser 150, RAV4 and first-generation Toyota C-HR.
When is the enhanced security upgrade going to be available and will it be free of charge?
Exact timings are still to be confirmed. We anticipate being able to advise the Toyota Centre network with full details soon. The security enhancement needs to be carried out at a Toyota Centre. Costs are under review; customers may incur a nominal charge.
Are any new models targeted by thieves?
While no car can be considered 100% immune to criminal intent, more recent models are equipped with enhanced security systems aimed at deterring CAN bus type thefts.
Given that the rise in this type or car theft has been known for several years in other countries and is growing in the UK why wasn’t I told about this?
Toyota takes the issue of car crime very seriously. To protect customers’ vehicles our approach is not to disclose our vehicle theft analysis data. The sharing of information could enable thieves to find ways to circumvent anti–theft technologies or make some models particularly attractive to some thieves and unnecessarily vulnerable to attack.
Is a Vehicle Protection Plate (VPP) available for any Toyota models?
Yes, for RAV4, excluding the Plug-In Hybrid model (which is not susceptible to CAN bus attack). The fitment is chargeable.
What is the countermeasure and what’s the plan moving forwards?
We are continuously developing technical solutions to make our vehicles more secure and reduce the risk of theft. An enhanced security hardware was introduced in October 2022 on the latest versions of the models that had previously been targeted by criminals. Since then, we have seen a significant drop-off in terms of successful thefts of those models.
Why is there no recall for vehicles susceptible to the CAN bus attack?
Recall announcements in the UK are guided by very specific guidelines as drawn up by the Driver and Vehicle Standards Agency (DVSA). To qualify as a recall, the issue must relate to a safety or thermal type issue where there is potential for injury as a result of vehicle manufacture or component failure. Only in these such circumstances can a recall be announced. In recall circumstances, the DVSA will provide manufacturers access to ownership records for purpose of communication. Instances of theft do not trigger a recall.
Will Toyota pay for damage caused by an attempted theft?
No. This will need to be addressed by the customer and the vehicle insurers. While we understand theft or attempted theft can be highly upsetting and, in some cases, a costly experience, in such instances customers are first and foremost victims of crime. Toyota does not cover costs associated with criminal activity either under the terms of the warranty or as goodwill.
What is the position with insuring affected models?
As a manufacturer, we stay close to Toyota Insurance colleagues and indeed all motor insurers. We are aware that in many cases, insurance premiums might have increased as a direct result of vehicle crime. We need to refer you to your insurer for further comment.
From which year the C-HR is not deemed at CanBus risk of theft. Was considering purchasing the refreshed model from 2020
Hi Shahed,
We do not publish the full details online, we can check an individual registration number for you or the seller should also be able to provide this information.
Thanks,
Toyota UK
Had my 1 year old Hilux stolen yesterday this very way. Only when searching as to how this has happened have I now realised how easy it was for them.
Why Toyota do not tell customers this is dis I have no idea. I then received a call from Toyota the same day trying to sell me a new one and were sorry it was stolen which is a little insensitive to say the least. I suppose for Toyota why would they make them safer as it’s good for business for them to make them easy to steal so people buy more of them
Hi Tom, thanks for getting in touch.
We’re really sorry to hear about your Hilux and hope for it to be recovered swiftly.
Toyota UK
Looking to purchase a new 2024 venva. Is this vehicle still vulnerable to canbus attack?
Hi Cavin, thanks for getting in touch.
This is not a model we offer here in the UK. Please get in touch with Toyota in your area directly.
Thanks,
Toyota UK
Hi
I was wondering if the UK 2024 model of the RAV4 hybrid is still susceptable to the bus attack, and does it have the plate fitted underneath and possibly behind the headlight as standard.
Hi Peter, thanks for getting in touch.
The RAV4 Hybrid in our current model range is not deemed as at risk of CANbus theft, your local Totoya Centre can provide further information on this.
Thanks,
Toyota UK
I have had a Hilux taken smashed window to gain access to the car then started with a start device
Gone in under 2 mins
£52000 with options and no security that’s standing up to the attacks of car thieves
Is Toyota doing any updates or anything to the Hilux ??
Hi Dan, thanks for your comment.
We’re so sorry to hear about your Hilux, this is a model that we are currently working on enhancing the security of. We hope yours can be recovered swiftly.
Toyota UK
Hello,
My RAV4 was stolen a few days ago and recovered by police. The method used was a CAN bus attack through front-left wheel arch. It took thieves 2 minutes to drive away in the vehicle. The vehicle will now be serviced by Toyota to repair the damage. Given the above statement, are enhanced security measures now available for fitting in Toyota Service centres and if yes – how do I properly (refer to) request them to be carried out?
Hi Igor, thanks for getting in touch.
We’re sorry to hear that your RAV4 was targeted. Your local Toyota Centre will be able to fit both a Vehicle Protection Plate and a Tracker. Just give them a call to get this booked in.
Thanks,
Toyota UK
Thank you! My last service which had taken place in June this year there has been no mention of any additional protection options available and the fact that this RAV4 model is a target. I am gutted to realise that this could have been avoided if we were properly informed by the service garage. I assume that since it’s not done as a preventative measure but rather as post-incident response, I will not be expected to pay anything extra to bring the vehicle to an up-to-date security standard?
Appreciate your help.
Hi
I am looking to purchase a Yaris cross 21 plate, wanting to know if it is susceptible to CAN bus type theft.
Hi Rosina, thanks for getting in touch.
This model is not deemed as at risk of CANbus theft.
Thanks,
Toyota UK
Hi! I just purchased an approved used RAV4 on LR71*** plate. Are you able to check for me please if it might have been already fitted with that plate or if I should reach out to a dealer to get one done?
Hi Alex, thanks for getting in touch.
This vehicle is fitted with the Vehicle Protection Plate, but we’d recommend getting in touch with your local Toyota Centre regarding a Tracker fitment too.
Thanks,
Toyota UK
Thanks! I just have arranged the tracker fitting for tomorrow, but interestingly the service team advised regaridng the protection plate that:
“I can confirm this has not been fitted to your vehicle but is something we can do for you.”
So, could you please:
1) Verify if it has been 100% fitted already? Is there some record evidence as I have not found it in the service history. I’d like to be safe, but also don’t want the service dealer to charge me for something that somebody else did before.
2) Any external immobilisers you know that would work well on my vehicle? I have seen plenty online (e.g. Ghost, Halo), but also seen that compatibility may vary and affect some functionality depending on the software version the vehicle is running. Any comments?
Hi Alex, thanks for your response.
The Toyota Centre will be able to check if the protection plate has been fitted, it will be visible upon inspection. There are many differnet immobilisers out there but we do not have an affiliation with one particular brand. Your dealership may be able to advise on local providers.
Thanks,
Toyota UK
Hi again!
Sorry, the response is quite confusing… your initial message sounds like you believe the vehicle has already been fitted with the plate? Is that correct understanding from my part? Obvioulsy we would be able to check it, but it is interesting to know why you first said it looks like it is already fitted, but the service said the opposite.
Thanks!
Alex
Hello Alex,
Apologies for the confusion!
This vehicle does not have the plate fitted.
Would you like to have this fitted?
Thanks.
thanks! I have it done now, but may i note it was a very unfortunate misunderstanding. Glad we are on the same page now.
Hello – just looking at the Rav 4 Design with a ‘21 plate. What is the approach you suggest I take with the dealer. When I mentioned this theft issue and reference to this statement, the dealer denied all knowledge. What security options come as standard or are available on this vehicle?
Hi there, we’re sorry to hear this.
Please could you provide your full registration number and name of Toyota Centre, we’ll pass a request over to them. You can do this here on the blog and we will delete your response rather than publish, or you can send to one of our Toyota UK social media channels.
Thanks,
Toyota UK
Hello.
Please will you update me on the progress of this? Are you able to email me directly?
Thank you for your help.
Hi James,
Our team can further assist at cr@toyota.co.uk
Thanks,
Toyota UK
Thank you Toyota. The dealer is now fitting both the tracker and protection plate free of charge. I’m still mystified as to why they had no knowledge of this when first mentioned, and then said that I would have to pay for it before Toyota UK clarified the situation with the dealer.
– Was the dealer trying to make an extra bit of profit?
– Is communication from Toyota to dealers not brilliant (which is contrary to my experience of your communication with me)?
– Is the theft issue a reasonably low risk but seems worse due to my knowledge of this forum hence why the dealer had no knowledge.
– was the dealer denying all knowledge of the theft issue to make a sale?
Are you able to publish figures/statistics on the Rav 4 theft issue before I commit to purchasing one.
Thank you.
Hi Toyota, I have had the protection plates fitted after an earlier failed attempt at a CANbus theft. Reading your last few replies are Toyota now offering a Tracker fitment for further piece of mind?
Or is this an option at extra cost?
Kiran
Hi Kiran, thanks for getting in touch.
Yes, the Tracker is also free of charge with a three year subscription.
Thanks,
Toyota UK
Is the tracker free on second hand vehicles from the dealer. Again – my local dealer said they wouldn’t fit this when I asked and that it would have to be done independently.
Hello,
Thanks for your question.
You will need to email cr@toyota.co.uk for further assistance with this matter as they will be able to investigate this and liaise with your Toyota Centre directly.
Thank you.
Thank you for the reply. Can I ask if there has been a change in policy on the protection plates? Seems that those getting them fitted now are having them done without any charge whereas I was charged £70 when I had mine done?