Lexus UK statement on vehicle theft

We take the issue of Toyota and Lexus vehicle theft very seriously. We are continuously developing technical solutions to make our vehicles more secure, to help reduce the risk of theft.

An enhanced security hardware system was introduced in October 2021 on the latest models targeted by criminals. Since which, we have seen a significant drop in thefts of those models.

For older models, we endeavour to create solutions that can offer enhanced protection to our customers.  Following significant investments by Toyota GB, in line with that of other vehicle manufacturers, newly developed official Toyota and Lexus security hardware components will very soon be available to fit to those targeted models registered before October 2021.

Following communication from Lexus in the coming weeks, owners should contact their local dealer to arrange free of charge fitment. Customers can already speak to their local dealer about the fitment of a protective plate to block access to the vehicle’s electronics. This is a nationwide customer care offering.

As a vehicle manufacturer, we can never completely eliminate the risk of vehicle theft. This is an industry-wide issue, concerning all vehicle manufacturers and affecting the most popular models first.

In order to further reduce the theft risk, we regularly collaborate and share information with insurance associations, police and law enforcement authorities, theft prevention experts and other key stakeholders around the world. This enables us to understand new threats and techniques used by thieves and develop more secured systems. 

Alongside our efforts, we urge those authorities to focus on reducing the number of thefts. We would also like to see action taken that leads to the end to the online sale of devices used by criminals to steal cars without using the car keys, as these devices serve no purpose other than a criminal one.

How do thieves manage to steal cars this way?

The thieves disconnect part of the headlamp and use a malicious device to send signals to the control CAN bus (the communication ‘backbone’ within a car) that allow the doors to open and the car to start without the key or remote control.

Thieves need to:

  • Purchase a relatively expensive rogue device (third-party ‘emergency start’ device which costs around £2,500 – £4,000 each)
  • Gain physical access to the vehicle’s CAN bus communication wires for an uninterrupted period.

The third-party ‘emergency start’ device has the capability to initiate an exploit in the following manner:

  • Once connected to the vehicle’s CAN bus communication wires, the third-party ‘emergency start’ device can send a prioritised series of CAN signals to bypass the vehicle’s security and immobiliser systems, which could allow a thief to unlock the doors and turn the vehicle’s ignition ON.
  • The third-party ‘emergency start’ device is then disconnected.
  • At this point a thief can enter the vehicle and start the car without the key

What is Lexus doing to prevent these types of attacks?

Lexus takes the issue of car theft very seriously.  We are continuously developing technical solutions to make our vehicles more secure to help reduce the risk of theft.

In the UK market, an enhanced security hardware was introduced in October 2021 on the latest versions of the models that had previously been targeted by criminals. Since then, we have seen a significant drop-off in terms of successful thefts of those models.

For older models we endeavour to create solutions that can offer enhanced protection to our customers.  We cannot divulge the precise nature of the imminent security enhancement; should we do so we risk offering information into the public domain that could be of interest to criminal parties.

The intention is to make the security enhancement available to all vehicles where a countermeasure is available. 

In October 2021 (introduction of NG NX), a new security platform started to be rolled out. There are no reports of theft using the CAN bus injection method on any model with the new platform.

What models are known to be targeted by this issue and are newer models affected?

The model primarily targeted is the Lexus RX Gen 4. Other models have also been targeted.

Which Lexus models can be fitted with the enhanced security feature?

It can be fitted to previous generation RX, NX, plus ES, LC, LS, RC, GS, UX and UXe

When did Lexus first become aware of the vulnerability in the security system?

It is not so much vulnerability of the security systems but more so the growing rise in criminal gangs targeting vehicles for ‘cannibalisation’ and / or complete theft. Instances appear to have been rising significantly from 2019-2020. There are many factors involved and at a global level. This includes parts of the world experiencing parts shortage which results in targeted thefts to supply vehicles and/or parts sent to countries experiencing trade restrictions.

When is the enhanced security upgrade going to be available and will it be free of charge?

Exact timings are still to be confirmed. We anticipate being able to advise the Lexus Centre network with full details soon. The required enhancement needs to be carried out at a Lexus Centre. Costs are under review and customers may incur a nominal charge.

Are new models such as the LBX targeted by thieves?

While no car can be considered 100% immune to criminal intent, more recent models are equipped with enhanced security systems aimed at deterring CAN bus type thefts.

Given that the rise in this type or car theft has been known for several years in other countries and is growing in the UK why wasn’t I told about this?

Lexus takes the issue of car crime very seriously. To protect customers’ vehicles our approach is not to disclose our vehicle theft analysis data. The sharing of information could enable thieves to find ways to circumvent anti–theft technologies or make some models particularly attractive to some thieves and unnecessarily vulnerable to attack.

Why are Lexus owners not being invited to install protective plates to their vehicles and why were they only supplied to London Centres?

Lexus offers a free of charge VPP (Vehicle Protection Plate) to any RX450h customer.  Every Lexus Centre across the UK has access to this part. Parts were issued to London Centres in the first instance in line with where the demand has occurred, but all Centres can order the VPP. The strategy is however, to focus attention not to the roll-out of the VPP but to a sophisticated vehicle enhancement.

What is the countermeasure and the plan moving forwards?

We are continuously developing technical solutions to make our vehicles more secure and reduce the risk of theft. An enhanced security hardware was introduced in October 2021 on the latest versions of the models that had previously been targeted by criminals. Since then, we have seen a significant drop-off in terms of successful thefts of those models.

Also we are able to supply and fit a VPP (Vehicle Protection Plate) to targeted RX models

We endeavour to make available another solution that can offer enhanced protection. Details will follow in the coming weeks. This will be communicated to the Lexus Centre network, which will also be responsible for fitting the enhanced security solution.

Why is there no recall for vehicles susceptible to the CAN bus attack?

Recall announcements in the UK are guided by very specific guidelines as drawn up by Driver and Vehicle Standards Agency (DVSA).  To qualify as a recall, the issue must relate to a safety or thermal type issue where there is potential for injury as a result of vehicle manufacture or component failure.  Only in these such circumstances can a recall be announced. 

In recall circumstances, the DVSA will provide manufacturers access to ownership records for purpose of communication.  Instances of theft do not trigger a recall.

Will Lexus pay for damage caused by an attempted theft?

No. This will need to be addressed by the customer and the vehicle insurers. While we understand theft or attempted theft can be highly upsetting and, in some cases, a costly experience, in such instances customers are first and foremost victims of crime.  Lexus does not cover costs associated with criminal activity either under the terms of the warranty or as goodwill.

What is the position with insuring affected models?

As a manufacturer, we stay close to Lexus Insurance colleagues and indeed all motor insurers. We are aware that in many cases, insurance premiums might have increased as a direct result of vehicle crime. We need to refer you to your insurer for further comment.

401 comments

  1. Should my Dealer be offering me any security update NX 300H September 2021. when I last asked them said they were waiting for a update from Lexus

    1. Hi David, thanks for getting in touch.

      There is a roll out process for the tracker system and your local Lexus Centre will be able to check if you vehicle is on the list of vehicles currently eligible. This has been a recent communication, in the past week or so.

      Thanks,

      Lexus UK

  2. So I have a 2019 300h purchased 14 months ago from local Lexus dealer.

    Will they contact me regarding the tracker? I presume fitting is FOC?

    1. Hi Nigel, thanks for getting in touch.

      You will need to speak to your local Lexus Centre directly regarding eligibility for the tracker.

      Thanks,

      Lexus UK

  3. Hi there,
    I own a 2016 Lexus NX300h and would like to inquire about installing a protective plate for added security. Could you kindly provide advice on the best options available for this model, as well as any other measures we should consider to safeguard the vehicle from theft?

    Additionally, a close family member recently had their 2019 Lexus NX300h stolen last night. We are seeking guidance on how the manufacturer can assist us in dealing with this situation and any preventive measures we can implement to avoid such incidents in the future.

    My nearest Lexus showroom is located in Croydon, and I would appreciate your advice at your earliest convenience.

    Thank you for your assistance.

    1. Hi Kamil, thanks for getting in touch.

      We will need your full registration number to confirm eligibility of your vehicle.

      Thanks,

      Lexus UK

          1. I am writing to express my profound disappointment and frustration with your recent response regarding the security vulnerabilities of the Lexus NX models, particularly the risk of CANbus theft. While you claim that the NX is “not at risk,” this assertion does not align with a concerning incident my family has just experienced.

            On 17th September 2024, around 21:51 hours, my close family member’s 2019 Lexus NX300h was stolen while parked in the Streatham/Norbury area of South London, a street away from her house. The thieves used a device near the passenger side headlight to bypass the vehicle’s security systems and steal the car within two minutes, all without triggering any alarms. This clearly points to a severe vulnerability in the vehicle’s security, contrary to your position that the NX model is not susceptible to such risks.

            This incident has left us deeply concerned and stressed about the safety of my wife’s 2016 Lexus NX300h, which could also be at risk of theft due to the same security flaw. We are now anxious about how to protect her vehicle, given that Lexus has yet to address these security shortcomings effectively.

            It is both disappointing and frustrating that a prestigious brand like Lexus is not accepting responsibility for this well-documented issue, leaving customers exposed to sophisticated forms of theft. As loyal Lexus customers, we trust your vehicles to offer reliable security, and it is unacceptable that adequate preventive measures have not been put in place to address this vulnerability.

            I strongly urge Lexus to acknowledge the risks associated with your vehicles, improve security systems, and provide support to those affected by these thefts. We expect Lexus to take responsibility and ensure that steps are taken to protect your customers in the future.

            I look forward to your prompt and serious response on this critical matterand protect my Wife’s 2016 NX300h before it gets too late.

          2. Hi Kamil, thanks for getting in touch.

            The vulnerability of each vehicle is assessed on a case by case basis, there is no blanket inclusion or exclusion. Your local Lexus Centre will be able to take a look at your NX and advise on the risk level and what precautions may be available.

            Thanks,

            Lexus UK

  4. Hi, Just purchased a 2014 nx300h. Can you confirm this car is at risk of the can bus theft? I’d so, what are the counter measures?

    1. Hi Amin, thanks for getting in touch.

      Your NX will not be at risk of CANbus theft due to the age of the vehicle.

      Thanks,

      Lexus UK

  5. I understand that vehicle protection plates are not classed as a manufacturer recall but Lexus needs to do something official about this Canbus theft problem to send a message to the car thieves that there is no point attempting to steal Lexus vehicles anymore using the Canbus method if all eligible vehicles have had them fitted..
    Better still would be to create a revised encrypted Canbus hardware/software module and install them into all required Lexus vehicles as a manufacturer recall.
    Until Lexus takes the above measures, people’s cars are going to be vandalized one to many times as thieves continue to attempt theft of these cars with vehicle plates fitted until Lexus gets the message out that Canbus theft won’t work anymore.
    There will be a big cost to Lexus/Toyota to install new hardware/software encrypted Canbus modules to the affected cars but surely that would be worth it in the long run as this Canbus theft issue with Lexus becoming one of the top stolen cars in the UK, USA, Canada, Japan etc the damage to the brand’s reputation so far must be huge. Large numbers of loyal customers are probably going to drop the Lexus brand at the end of lease contracts and potential new customers will stay away from buying Lexus cars due to the theft reputation and Lexus’s slow approach to dealing with it in a timely manner.

  6. I have now sold my Lexus UX250H as it was simply not feasible to retain ownership while being such a targeted vehicle. The insurance premiums on this vehicle were simply astronomical and I’ve taken the decision to buy from a competitor. Unfortunately I was only 24 months into a 48 month PCP, therefore I was in negative equity, resulting in the difference being paid out-of-pocket.

    My question to Lexus: will there be any compensation to cover my losses or will you simply be washing your hands of the whole debacle?

    1. Hi Nick, thanks for getting in touch.

      We’re sorry to hear that you are no longer a Lexus owner. We continue to work to combat the risk of vehicle theft, but it is something that always has been and likely always will be prevalent.
      We’ll pass your feedback along to our team.

      Thanks,

      Lexus UK

  7. In the space of 18 months, I have had two Lexus UX 250 H Cars stolen. The first was stolen never to be found and the replacement was stolen and trashed accessing the electrics.
    Are all the UX 250H models fitted with the appropriate security features to prevent theft?
    These cars seem to be easy to steal.

    1. Hi Alison, thanks for getting in touch.

      We’re sorry to hear your new UX has been targeted. There is no blanket statement to advise which vehicles are at risk of CANbus theft, we can confirm on a case by case basis.
      Please get in touch with your local Lexus Centre to register your vehicle is vulnerable, in preparation for when further security enhancements become available.

      Thanks,

      Lexus UK

  8. Hi,
    Does the Canbus issue affect my car? my plate number is: MF17YLS

    I had a service 1 month ago and the dealer did install the tracker but nothing was mentioned about any security updates or VPP/

    1. Hello Roham,
      Thanks for your comment.
      Due to the age of your NX, it is not affected by CAN bus theft.
      We hope this helps.
      Thank you.

  9. I have just contacted my Local Lexus dealer, they advise me they are only fitting Trackers to the RX at the moment, when will they be available for the affected UX?
    Thanks

    1. Hello Simon,
      Thanks for your comment.
      Please may we take your vehicle registration so we can assist you further?
      Or if you’d prefer, please email your vehicle registration as well as the name of your local Lexus Centre to our Customer Relations team on cr@lexus.co.uk who can look into this for you.
      Thank you.

Leave a Reply

Your email address will not be published. Required fields are marked *