We take the issue of Toyota and Lexus vehicle theft very seriously. We are continuously developing technical solutions to make our vehicles more secure, to help reduce the risk of theft.
An enhanced security hardware system was introduced in October 2021 on the latest models targeted by criminals. Since which, we have seen a significant drop in thefts of those models.
For older models, we endeavour to create solutions that can offer enhanced protection to our customers. Following significant investments by Toyota GB, in line with that of other vehicle manufacturers, newly developed official Toyota and Lexus security hardware components will very soon be available to fit to those targeted models registered before October 2021.
Following communication from Lexus in the coming weeks, owners should contact their local dealer to arrange free of charge fitment. Customers can already speak to their local dealer about the fitment of a protective plate to block access to the vehicle’s electronics. This is a nationwide customer care offering.
As a vehicle manufacturer, we can never completely eliminate the risk of vehicle theft. This is an industry-wide issue, concerning all vehicle manufacturers and affecting the most popular models first.
In order to further reduce the theft risk, we regularly collaborate and share information with insurance associations, police and law enforcement authorities, theft prevention experts and other key stakeholders around the world. This enables us to understand new threats and techniques used by thieves and develop more secured systems.
Alongside our efforts, we urge those authorities to focus on reducing the number of thefts. We would also like to see action taken that leads to the end to the online sale of devices used by criminals to steal cars without using the car keys, as these devices serve no purpose other than a criminal one.
How do thieves manage to steal cars this way?
The thieves disconnect part of the headlamp and use a malicious device to send signals to the control CAN bus (the communication ‘backbone’ within a car) that allow the doors to open and the car to start without the key or remote control.
Thieves need to:
- Purchase a relatively expensive rogue device (third-party ‘emergency start’ device which costs around £2,500 – £4,000 each)
- Gain physical access to the vehicle’s CAN bus communication wires for an uninterrupted period.
The third-party ‘emergency start’ device has the capability to initiate an exploit in the following manner:
- Once connected to the vehicle’s CAN bus communication wires, the third-party ‘emergency start’ device can send a prioritised series of CAN signals to bypass the vehicle’s security and immobiliser systems, which could allow a thief to unlock the doors and turn the vehicle’s ignition ON.
- The third-party ‘emergency start’ device is then disconnected.
- At this point a thief can enter the vehicle and start the car without the key
What is Lexus doing to prevent these types of attacks?
Lexus takes the issue of car theft very seriously. We are continuously developing technical solutions to make our vehicles more secure to help reduce the risk of theft.
In the UK market, an enhanced security hardware was introduced in October 2021 on the latest versions of the models that had previously been targeted by criminals. Since then, we have seen a significant drop-off in terms of successful thefts of those models.
For older models we endeavour to create solutions that can offer enhanced protection to our customers. We cannot divulge the precise nature of the imminent security enhancement; should we do so we risk offering information into the public domain that could be of interest to criminal parties.
The intention is to make the security enhancement available to all vehicles where a countermeasure is available.
In October 2021 (introduction of NG NX), a new security platform started to be rolled out. There are no reports of theft using the CAN bus injection method on any model with the new platform.
What models are known to be targeted by this issue and are newer models affected?
The model primarily targeted is the Lexus RX Gen 4. Other models have also been targeted.
Which Lexus models can be fitted with the enhanced security feature?
It can be fitted to previous generation RX, NX, plus ES, LC, LS, RC, GS, UX and UXe
When did Lexus first become aware of the vulnerability in the security system?
It is not so much vulnerability of the security systems but more so the growing rise in criminal gangs targeting vehicles for ‘cannibalisation’ and / or complete theft. Instances appear to have been rising significantly from 2019-2020. There are many factors involved and at a global level. This includes parts of the world experiencing parts shortage which results in targeted thefts to supply vehicles and/or parts sent to countries experiencing trade restrictions.
When is the enhanced security upgrade going to be available and will it be free of charge?
Exact timings are still to be confirmed. We anticipate being able to advise the Lexus Centre network with full details soon. The required enhancement needs to be carried out at a Lexus Centre. Costs are under review and customers may incur a nominal charge.
Are new models such as the LBX targeted by thieves?
While no car can be considered 100% immune to criminal intent, more recent models are equipped with enhanced security systems aimed at deterring CAN bus type thefts.
Given that the rise in this type or car theft has been known for several years in other countries and is growing in the UK why wasn’t I told about this?
Lexus takes the issue of car crime very seriously. To protect customers’ vehicles our approach is not to disclose our vehicle theft analysis data. The sharing of information could enable thieves to find ways to circumvent anti–theft technologies or make some models particularly attractive to some thieves and unnecessarily vulnerable to attack.
Why are Lexus owners not being invited to install protective plates to their vehicles and why were they only supplied to London Centres?
Lexus offers a free of charge VPP (Vehicle Protection Plate) to any RX450h customer. Every Lexus Centre across the UK has access to this part. Parts were issued to London Centres in the first instance in line with where the demand has occurred, but all Centres can order the VPP. The strategy is however, to focus attention not to the roll-out of the VPP but to a sophisticated vehicle enhancement.
What is the countermeasure and the plan moving forwards?
We are continuously developing technical solutions to make our vehicles more secure and reduce the risk of theft. An enhanced security hardware was introduced in October 2021 on the latest versions of the models that had previously been targeted by criminals. Since then, we have seen a significant drop-off in terms of successful thefts of those models.
Also we are able to supply and fit a VPP (Vehicle Protection Plate) to targeted RX models
We endeavour to make available another solution that can offer enhanced protection. Details will follow in the coming weeks. This will be communicated to the Lexus Centre network, which will also be responsible for fitting the enhanced security solution.
Why is there no recall for vehicles susceptible to the CAN bus attack?
Recall announcements in the UK are guided by very specific guidelines as drawn up by Driver and Vehicle Standards Agency (DVSA). To qualify as a recall, the issue must relate to a safety or thermal type issue where there is potential for injury as a result of vehicle manufacture or component failure. Only in these such circumstances can a recall be announced.
In recall circumstances, the DVSA will provide manufacturers access to ownership records for purpose of communication. Instances of theft do not trigger a recall.
Will Lexus pay for damage caused by an attempted theft?
No. This will need to be addressed by the customer and the vehicle insurers. While we understand theft or attempted theft can be highly upsetting and, in some cases, a costly experience, in such instances customers are first and foremost victims of crime. Lexus does not cover costs associated with criminal activity either under the terms of the warranty or as goodwill.
What is the position with insuring affected models?
As a manufacturer, we stay close to Lexus Insurance colleagues and indeed all motor insurers. We are aware that in many cases, insurance premiums might have increased as a direct result of vehicle crime. We need to refer you to your insurer for further comment.
After being a lexus customer for over 20 years it is with a heavy heart that I will no longer continue to be a patron of your brand. My 22 Plate RX450h has been targeted by thieves on no less 6 occasions causing untold damage to the vehicle and cost at my expense. My insurer has refused to renew my policy due to the high theft rate of this particular model. I have lost total confidence in Lexus as a brand for the foreseeable future. When I was growing up the jokes used to be on Skoda cars, this is now the same that can be applied to Lexus,
Hello TM,
Thank you for your comment and for your loyalty to Lexus over the last two decades.
We are sincerely sorry to hear of the repeated incidents concerning your RX450h and the distress it has caused you.
Unfortunately, a rise in theft and consequently rising insurance premiums are both issues that the entire automotive industry is facing.
Please be assured that we are working on bringing security enhancements for affected vehicles to market as a matter of urgency.
Furthermore, in October 2021, we started to introduce enhanced security hardware on the latest versions of the models that had previously been targeted by criminals.
Since then, we have seen a significant drop-off in terms of successful thefts of those models.
Once again, we are really sorry for the distress this situation has caused.
If there is anything further that we can do to restore your faith in the brand, please let us know.
Thank you.
As a long-term customer with Lexus, I am also very disappointed that my RX 450 F sport first time was stolen. I had a steering lock on my steering wheel was cut to remove the steering lock, luckily, I was able to recover the car if not for my AirTag. I have updated my security system on the car twice they’ve tried to steal the car again even though I had a vehicle protection plates installed in the car what actually saved my car is there additional Security? I personally added to the Car immobiliser and a tracker system this is very stressful as a car owner. I have spoken to Lexus today to make them aware only to be taught. You can book an appointment for two weeks time to have a look at the damage done which they will charge me over £200 just to look at what damage is done to the car, I wish I knew when I bought this car in November last year I would’ve bought a different brand. Thank you very much, Lexus
Hello Mike,
We are terribly sorry to hear that you have been affected by this awful crime, we are glad to hear that your vehicle has been recovered though.
Please be assured that we are working to bring new security enhancements for affected vehicles to market as a matter of urgency.
Furthermore, in October 2021, Lexus started to introduce enhanced security hardware on the latest versions of the models that had previously been targeted by criminals.
Since then, we have seen a significant drop-off in terms of successful thefts of those models.
While we understand theft or attempted theft can be highly upsetting and, in some cases, a costly experience, in this scenario, you are the victim of a crime.
Lexus does not cover costs associated with criminal activity either under the terms of the warranty or as goodwill.
Once again, we are sorry that you have been affected by this crime and we hope you are back on the road soon.
Thanks.
I am heartbroken and deeply depressed after losing my RX 450 in the first week of September 2024. This was my third RX, and I have been a loyal Lexus customer for over 12 years. I never thought I would become a victim of car theft. I was unaware of the latest method thieves are using to steal vehicles by disconnecting sensors near the headlights.
What frustrates me most is that this issue wasn’t promptly communicated to longstanding customers like myself. After the incident, I read online comments that showed this problem has been ongoing for some time. I only came across this information when I was searching for more details about car theft. Like many others, I hadn’t been reading the Lexus UK magazine online because we don’t anticipate such situations happening. I had always believed other popular SUV brands were more vulnerable to theft.
Had Lexus sent out some form of warning or communication regarding this issue, I would have taken steps to protect my vehicle, even if it meant spending more to do so. Unfortunately, that wasn’t the case, and now I’m left feeling disappointed and let down by the brand I trusted for so many years.
After dealing with the insurance claim, I am seriously questioning whether my next vehicle will be a Lexus. This experience has left me with significant doubts about the brand’s commitment to keeping its customers informed and protected.
Sincerely,
Hello,
We are truly sorry to hear that you have been affected by theft.
As we’re sure you know, a rise in vehicle theft is an issue that the entire automotive industry is facing.
Due to the scale of the issue, individual communication has been challenging, but we have been working diligently to address the situation and keeping our customers updated through the most efficient means available – such as this article.
It’s also important to know that in October 2021, we started to introduce enhanced security hardware on the latest versions of the models that had previously been targeted by criminals.
Since then, we have seen a significant drop-off in terms of successful thefts of those models.
Once again, we are really sorry you have been affected by this crime and for the distress this has caused.
Please let us know if there is anything else we can help you with.
Thanks.
Dear Lexus Team,
I was expecting this standard, computer-generated, generic response—nothing unusual. However, my point to Lexus is why wasn’t this issue communicated or addressed with RX450 customers in advance, especially after noticing the sharp increase in RX450 thefts from the beginning of this year? I understand that car theft has risen across various models, but as a loyal Lexus customer for all this time, I was relying on Lexus to provide such warnings. I also expected additional service and care, which sadly did not happen. This has been very disappointing and disheartening.
In such situations, I would like to know how Lexus can assist affected customers like myself. While I certainly don’t expect Lexus representatives to chase down thieves, how can Lexus take responsibility and offer some form of compensation for the loss? After all, Lexus bears some responsibility for not providing adequate technology to prevent such thefts.
Could Lexus offer support to customers in managing insurance claims, such as helping to mitigate increased premiums or assisting with any gaps in coverage (e.g., where GAP insurance is not in place)? Furthermore, does Lexus provide any schemes to help affected customers purchase their next Lexus? I assure you, retaining affected customers will be a significant challenge for Lexus in situations like this.
I’m sorry to say this, but this may be just one incident for a large company like Lexus, which sells millions of cars globally. Lexus could simply ignore these comments or choose not to publish or respond due to the content. However, I feel compelled to raise these important concerns on behalf of all other customers facing similar issues.
Is pursuing legal action the only remaining option, as some customers have already done, with cases still ongoing?
I look forward to your response and hope for a constructive resolution.
Regards,
My Lexus Ux fsport was stolen last week in London keylessly
in broad daylight
very annoyed and distressed that it happened and no support from lexus despite me contacting my local dealer
can anything be added to my ux car to avoid this happening again ?
Hi there, thanks for getting in touch.
We’re sorry to hear that your UX has been targeted, we hope for it to be recovered swiftly. We are currently rolling out further precautionary measures to affected vehicles, your local Lexus Centre will be able to provide further information on this.
Thanks,
Lexus UK
My Lexus RX 450 F Sport was stolen just 2 days after I purchased from lexus Woodford used approved. I was completely unaware of the vehicles vulnerability to theft. I would have appreciated a heads up and some options to improve security ie ghost 2 immobiliser. It seems like this issue can only really be fixed by a recall and a proper software / hardware update for impacted vehicles. I won’t be buying another premium vehicle after this experience.
Hello
My RX is vulnerable to canbus theft and has had a protective plate fitted. I approached my local Lexus dealer in Tunbridge Wells and they don’t seem to know anything about having a tracker fitted. Can you confirm if my car is eligible?- GK20*** – or does the prior fitment of the protective plate mean it’s not?
Hi William, thanks for your comment.
We have popped a note over to the team at Tunbridge Wells and they should be in touch with you shortly.
Thanks,
Lexus UK
Subject: Ongoing Security Enhancement Delay for NX Model – Urgent Action Required
Dear Lexus UK Customer Service,
I am writing to express my growing dissatisfaction with the handling of the security enhancement for the Lexus NX model, which was developed to address the concerning issue of theft. Several months ago, I was informed that a security update was available, and I have been regularly checking with my local dealership in Woodford, but to this day, I have yet to receive this crucial enhancement.
I live in an area with a high rate of vehicle theft, which makes this delay even more concerning. Additionally, this situation is now limiting my options for securing competitive insurance policies. As a loyal Lexus customer for several years, I am deeply disappointed by the lack of timely action on such a critical issue, which is affecting both my peace of mind and my ability to use my vehicle confidently.
This experience is eroding my trust in the Lexus brand, and I am becoming disillusioned with the level of customer care being provided. If this situation cannot be resolved promptly, I will be left with no choice but to explore other vehicle options for my future needs.
I hope you will treat this matter with the urgency it deserves and provide a clear timeline for when I can expect the security enhancement to be installed. I look forward to your prompt response.
Kind regards,
Ken
Hi Ken, thanks for getting in touch.
Our team can further assist with this on cr@lexus.co.uk
Thanks,
Lexus UK
Our 2017 RX450h was stolen yesterday, 5th October. I came across this article when doing some research on how we might protect any replacement car (faraday box and steering bar lock having proved insufficient). I’m extremely disappointed to learn that additional protections were available from Lexus but we had not been informed. We have been loyal Lexus customers for over 16 years. We willl be contacting our local dealer (Croydon) on Monday but this is really not good enough.
Hi Lisa, sorry to hear about your car. I’m also Lexus customer , With the RX 450 my was stolen last bank holiday managed to recover it. On the 5th of October Lexus installed the vehicle protection plate which I wasn’t aware of. two days later. They tried to steal the car from my house knowing that there is a vehicle protection plates in it. They left .3weeks later they came back and damaged the Protection plate. I can assure you it doesn’t work. They will damage your headlight more to take it out luckily for me I had ghost immobiliser in the car that saved my car otherwise I would’ve woken up and the car would’ve been gone.
My IS 300H 2014 was stolen yesterday night from Shirley in Solihull.
Lexus always serviced it, why was I never told about this ??
The only one to blame is Lexus.
Really angry and annoyed
Hello,
We are terribly sorry to hear that you have been affected by this terrible crime.
Due to the age and platform of your IS, it is not affected by the type of theft referred to in this article.
However, we trust that you are now in contact with the police and your insurance company to minimise further inconvenience.
We hope your vehicle is recovered and you are back on the road soon.
Thank you.
May I check if my late 2014 or mid 2016 GS300Hs are vulnerable to canbus theft? I am particularly concerned about the 2016 GS as it is the face lifted model.
The regs are: MF64*** and LR16***. Thanks
Hi Caleb, thanks for getting in touch.
The registration beginning with LR16 IS vulnerable to CANbus theft, the other vehicle is not.
Thanks
I own a 2018 RX 450H, PY18 GJK, that has already had the VPP fitted. I have been waiting for the trackers to become avaiable to have that fitted. I have heard nothing from Lexus but was informed today by a fellow RX owner that this is now happening. I contacted the Lexus dealer I use (Not my local Lexus Dealer) but was told that the tracker was not yet available for my vehicle as they are being allocated in batches and I would need to wait. Unfortunately they couldn’t give me a potential timescale or if I would be contacted by them or Lexus to let me know it was available. Can you tell me the criteria for allocating the trackers to vehicles, the timescales involved and who will be contacting the owners , Lexus, the local dealer or in my case my preferred Lexus dealer.
Hi Mark, thanks for your comment.
Please get in touch directly with the team at cr@lexus.co.uk
Thanks,
Lexus UK