We take the issue of Toyota and Lexus vehicle theft very seriously. We are continuously developing technical solutions to make our vehicles more secure, to help reduce the risk of theft.
An enhanced security hardware system was introduced in October 2021 (Lexus) and October 2022 (Toyota) on the latest models targeted by criminals. Since which, we have seen a significant drop in thefts of those models.
For older models, we endeavour to create solutions that can offer enhanced protection to our customers. Following significant investments by Toyota GB, in line with that of other vehicle manufacturers, newly developed official Toyota and Lexus security hardware components will very soon be available to fit to those targeted models registered before October 2021.
Following communication from Toyota and Lexus in the coming weeks, owners should contact their local dealer to arrange fitment. Customers can already speak to their local dealer about the fitment of a protective plate to block access to the vehicle’s electronics. This is a nationwide customer care offering available on Toyota RAV4 Hybrid, Lexus RX and Lexus NX.
As a vehicle manufacturer, we can never completely eliminate the risk of vehicle theft. This is an industry-wide issue, concerning all vehicle manufacturers and affecting the most popular models first.
In order to further reduce the theft risk, we regularly collaborate and share information with insurance associations, police and law enforcement authorities, theft prevention experts and other key stakeholders around the world. This enables us to understand new threats and techniques used by thieves and develop more secured systems.
Alongside our efforts, we urge those authorities to focus on reducing the number of thefts. We would also like to see action taken that leads to the end to the online sale of devices used by criminals to steal cars without using the car keys, as these devices serve no purpose other than a criminal one.
How do thieves manage to steal cars in this manner?
The thieves disconnect part of the headlamp and use a malicious device to send signals to the control CAN bus (the communication ‘backbone’ within a car) that allow the doors to open and the car to start without the key or remote control.
Thieves need to:
- Purchase a relatively expensive rogue device (third-party ‘emergency start‘ device which costs around £2500 – £4000 each)
- Gain physical access to the vehicle’s CAN bus communication wires for an uninterrupted period.
The third-party ‘emergency start‘ device has the capability to initiate an exploit in the following manner:
- Once connected to the vehicle’s CAN bus communication wires, the third-party ‘emergency start‘ device can send a prioritised series of CAN signals to bypass the vehicle’s security and immobiliser systems, which could allow a thief to unlock the doors and turn the vehicle’s ignition ON.
- The third-party ‘emergency start’ device is then disconnected.
- At this point a thief can enter the vehicle and start the car without the key.
What is Toyota doing to prevent these types of attacks?
Toyota and Lexus take the issue of car theft very seriously. We are continuously developing technical solutions to make our vehicles more secure to help reduce the risk of theft.
In fact, in the UK market, an enhanced security hardware was introduced in October 2021 on the latest versions of the models that had previously been targeted by criminals. Since then, we have seen a significant drop-off in terms of successful thefts of those models.
For older models we endeavour to create solutions that can offer enhanced protection to our customers.
We cannot divulge the precise nature of the imminent security enhancement; should we do so we risk offering information into the public domain that could be of interest to criminal parties.
The intention is to make the security enhancement available to vehicles affected by CAN bus theft.
What models are known to be targeted by this issue and are newer models affected?
The models primarily targeted are fourth-generation Lexus RX and the Toyota RAV4.
For older models we endeavour to create solutions that can offer enhanced protection to our customers.
Since October 2022, Toyota models are subject to a platform change that negates CAN Bus theft. This excludes Hilux, which is not subject to CAN bus attacks.
When did Toyota first become aware of the vulnerability in the security systems?
It is not so much vulnerability of the security systems but more so the growing rise in criminal gangs targeting vehicles for ‘cannibalisation’ and/or complete theft.
Instances appear to have been rising significantly from 2019-2020.
There are many factors involved and at a global level. This includes parts of the world experiencing parts shortage which results in targeted thefts to supply vehicles and/or parts sent to countries experiencing trade restrictions.
Which models can be fitted with the enhanced security feature?
It can be fitted to Land Cruiser 150, RAV4 and first-generation Toyota C-HR.
When is the enhanced security upgrade going to be available and will it be free of charge?
Exact timings are still to be confirmed. We anticipate being able to advise the Toyota Centre network with full details soon. The security enhancement needs to be carried out at a Toyota Centre. Costs are under review; customers may incur a nominal charge.
Are any new models targeted by thieves?
While no car can be considered 100% immune to criminal intent, more recent models are equipped with enhanced security systems aimed at deterring CAN bus type thefts.
Given that the rise in this type or car theft has been known for several years in other countries and is growing in the UK why wasn’t I told about this?
Toyota takes the issue of car crime very seriously. To protect customers’ vehicles our approach is not to disclose our vehicle theft analysis data. The sharing of information could enable thieves to find ways to circumvent anti–theft technologies or make some models particularly attractive to some thieves and unnecessarily vulnerable to attack.
Is a Vehicle Protection Plate (VPP) available for any Toyota models?
Yes, for RAV4, excluding the Plug-In Hybrid model (which is not susceptible to CAN bus attack). The fitment is chargeable.
What is the countermeasure and what’s the plan moving forwards?
We are continuously developing technical solutions to make our vehicles more secure and reduce the risk of theft. An enhanced security hardware was introduced in October 2022 on the latest versions of the models that had previously been targeted by criminals. Since then, we have seen a significant drop-off in terms of successful thefts of those models.
Why is there no recall for vehicles susceptible to the CAN bus attack?
Recall announcements in the UK are guided by very specific guidelines as drawn up by the Driver and Vehicle Standards Agency (DVSA). To qualify as a recall, the issue must relate to a safety or thermal type issue where there is potential for injury as a result of vehicle manufacture or component failure. Only in these such circumstances can a recall be announced. In recall circumstances, the DVSA will provide manufacturers access to ownership records for purpose of communication. Instances of theft do not trigger a recall.
Will Toyota pay for damage caused by an attempted theft?
No. This will need to be addressed by the customer and the vehicle insurers. While we understand theft or attempted theft can be highly upsetting and, in some cases, a costly experience, in such instances customers are first and foremost victims of crime. Toyota does not cover costs associated with criminal activity either under the terms of the warranty or as goodwill.
What is the position with insuring affected models?
As a manufacturer, we stay close to Toyota Insurance colleagues and indeed all motor insurers. We are aware that in many cases, insurance premiums might have increased as a direct result of vehicle crime. We need to refer you to your insurer for further comment.
I have recently bought a 2020 RAV4, will the protective plate and tracker be fitted free of cost by Toyota?
Hi SJ, thanks for getting in touch.
Yes, your local Toyota Centre will be able to assist with this. Please get in touch with them directly.
Thanks,
Toyota UK
Hi,
I have a vulnerable January 2022 RAV4 (non PHEV) I am about to contact the dealer to book a service.
Can you confirm that I can ask the dealer to fit protection plates for free including parts and fitting, and also the tracker parts and fitting for free?
I just want to be clear in case the dealer is not aware you are covering the cost.
Thank you
Hi Robert, thanks for getting in touch.
Yes, that is correct. Both items are free of charge.
Thanks,
Toyota UK
Hi, I would like to know if my brand new C-HR automatic (1.8) Excel HEV (current generation), registered in late May 2024 affected by the CANBUS thefts? (Number plate is BT24 W**)
Hi there,
We will need the full registration number to check.
Thanks,
Toyota UK
Hi! I bought a 2022 (22) in June.. please let me know if my CHR will already have the updated security tech or if it will need to be booked in
Hi Ian, thanks for getting in touch.
We will need the full registration number to confirm.
Thanks,
Toyota UK
Hello
I have recently bought a Toyota CHR GR Sport
Is it vulnerable to canbus theft
The reg is EO22***.
Also, can a tracker and VPP be installed free of charge please?
Thank you
Hi Ram,
We will need the full registration number to confirm.
Thanks,
Toyota UK
I have purchased a 2021 Hilux invincible. Will I be offered a tracker and protective plate free of charge?
Many thanks
Hi Andy, thanks for getting in touch.
There is no Vehicle Protection Plate for the Hilux, but you can get a Tracker installed. Please get in touch with your local Toyota Centre directly for assistance with this.
Thanks,
Toyota UK
There have been some cases, where the local Toyota Dealer denies that these security modifications are available and is unable to confirm any such roll out.
What do we do if we encounter this issue ?
Who do we then contact ?
Hi William, thanks for getting in touch.
Please contact the team on cr@toyota.co.uk
Thanks,
Toyota UK
Hi
Can you tell me if my RAV4 PHEV KF23*** is affected by CANBUS thefts?
Thank you
Hi Peter, thanks for getting in touch.
Your RAV4 is not deemed as at risk of CANbus theft.
Thanks,
Toyota UK
So sorry to hear about so many Toyota RAV4 stolen in October. Mine was also taken, but from a London Supermarket Car Park with CCTV in daytime probably via the headlamp route but recovered by police through my app.
I still haven’t seen the car yet but the insurance company has recovered it to the Midlands now awaiting repairs mainly to the passenger side and the internal dashboard panels that have been ripped out. I assume, from police comments to look for a tracker that didn’t exist. I assume the app is connected to the satnav via GPS which is to help locate the car in case I have a serious collision accident. I hope you can reassure us that this is very difficult to disable or the actual tracker you have advised your readers to have fitted by Toyota dealers are not easily found by hiding it in the panels. I reported the locations my car was parked to the police as it was apparently hidden in various places over a day and protected by a steering wheel lock when parked. (Warning to those who want to recover tracked cars without help). It was eventually recovered after I reported its final location to the police adjacent to a garage (probably co-incidental) that was proud of being resourceful and good value for money. Can thieves locate the addresses for owners of RAV 4 from DVLA or public accessible database? I hoped my theft was random but if a thief living in London spent £4000 on a piece of equipment to steal Toyotas and wanted to use it quickly-could they acquire such a list?
NOT SURE WHETHER YOU SHOULD PUBLISH THIS COMMENT as I recovered my car by using a method the thieves didn’t know about. Putting it in the public domain maybe a deterrent or encourage further initial damage to the car. I leave it to the editorial judgment whether you will address my comments personally or open. Thanks
Hi Joe, thanks for getting in touch.
We’re pleased to hear your RAV4 has been able to be recovered and hopefully the repairs are not too complex. You can get a Tracker fitted to your RAV4, free of charge. This is something that your local Toyota Centre can assist with and you can also discuss placement of the device with them.
As for your concerns on visibility of an ownership database, this is not possible. It’s one of the reasons we have struggled to communicate to existing owners, vehicle ownership changes and we do not hold the details of all current affected vehicles. However, it is a simple task of walking round a local area and spotting high ticket value items that may bring a significant return to thieves. Sadly this has been and always will be the case and is why we advise additional measures such as physical theft deterrents.
Thanks,
Toyota UK
Hi Joe
Did the police turn up and remove the steering wheel lock? It’s never occurred to me that the thieves would use a wheel lock themselves so great that you have shared.
Best regards
Peter
Hi,
Thank you for the confirmation. The dealer wants to charge for the plate fitting, can you send me an email confirming that both parts and LABOUR are free?
Thank you, I need ASAP.
Hi Robert,
Please get in touch with the team at cr@toyota.co.uk
Thanks,
Toyota UK