We take the issue of Toyota and Lexus vehicle theft very seriously. We are continuously developing technical solutions to make our vehicles more secure, to help reduce the risk of theft.
An enhanced security hardware system was introduced in October 2021 on the latest models targeted by criminals. Since which, we have seen a significant drop in thefts of those models.
For older models, we endeavour to create solutions that can offer enhanced protection to our customers. Following significant investments by Toyota GB, in line with that of other vehicle manufacturers, newly developed official Toyota and Lexus security hardware components will very soon be available to fit to those targeted models registered before October 2021.
Following communication from Lexus in the coming weeks, owners should contact their local dealer to arrange free of charge fitment. Customers can already speak to their local dealer about the fitment of a protective plate to block access to the vehicle’s electronics. This is a nationwide customer care offering.
As a vehicle manufacturer, we can never completely eliminate the risk of vehicle theft. This is an industry-wide issue, concerning all vehicle manufacturers and affecting the most popular models first.
In order to further reduce the theft risk, we regularly collaborate and share information with insurance associations, police and law enforcement authorities, theft prevention experts and other key stakeholders around the world. This enables us to understand new threats and techniques used by thieves and develop more secured systems.
Alongside our efforts, we urge those authorities to focus on reducing the number of thefts. We would also like to see action taken that leads to the end to the online sale of devices used by criminals to steal cars without using the car keys, as these devices serve no purpose other than a criminal one.
How do thieves manage to steal cars this way?
The thieves disconnect part of the headlamp and use a malicious device to send signals to the control CAN bus (the communication ‘backbone’ within a car) that allow the doors to open and the car to start without the key or remote control.
Thieves need to:
- Purchase a relatively expensive rogue device (third-party ‘emergency start’ device which costs around £2,500 – £4,000 each)
- Gain physical access to the vehicle’s CAN bus communication wires for an uninterrupted period.
The third-party ‘emergency start’ device has the capability to initiate an exploit in the following manner:
- Once connected to the vehicle’s CAN bus communication wires, the third-party ‘emergency start’ device can send a prioritised series of CAN signals to bypass the vehicle’s security and immobiliser systems, which could allow a thief to unlock the doors and turn the vehicle’s ignition ON.
- The third-party ‘emergency start’ device is then disconnected.
- At this point a thief can enter the vehicle and start the car without the key
What is Lexus doing to prevent these types of attacks?
Lexus takes the issue of car theft very seriously. We are continuously developing technical solutions to make our vehicles more secure to help reduce the risk of theft.
In the UK market, an enhanced security hardware was introduced in October 2021 on the latest versions of the models that had previously been targeted by criminals. Since then, we have seen a significant drop-off in terms of successful thefts of those models.
For older models we endeavour to create solutions that can offer enhanced protection to our customers. We cannot divulge the precise nature of the imminent security enhancement; should we do so we risk offering information into the public domain that could be of interest to criminal parties.
The intention is to make the security enhancement available to all vehicles where a countermeasure is available.
In October 2021 (introduction of NG NX), a new security platform started to be rolled out. There are no reports of theft using the CAN bus injection method on any model with the new platform.
What models are known to be targeted by this issue and are newer models affected?
The model primarily targeted is the Lexus RX Gen 4. Other models have also been targeted.
Which Lexus models can be fitted with the enhanced security feature?
It can be fitted to previous generation RX, NX, plus ES, LC, LS, RC, GS, UX and UXe
When did Lexus first become aware of the vulnerability in the security system?
It is not so much vulnerability of the security systems but more so the growing rise in criminal gangs targeting vehicles for ‘cannibalisation’ and / or complete theft. Instances appear to have been rising significantly from 2019-2020. There are many factors involved and at a global level. This includes parts of the world experiencing parts shortage which results in targeted thefts to supply vehicles and/or parts sent to countries experiencing trade restrictions.
When is the enhanced security upgrade going to be available and will it be free of charge?
Exact timings are still to be confirmed. We anticipate being able to advise the Lexus Centre network with full details soon. The required enhancement needs to be carried out at a Lexus Centre. Costs are under review and customers may incur a nominal charge.
Are new models such as the LBX targeted by thieves?
While no car can be considered 100% immune to criminal intent, more recent models are equipped with enhanced security systems aimed at deterring CAN bus type thefts.
Given that the rise in this type or car theft has been known for several years in other countries and is growing in the UK why wasn’t I told about this?
Lexus takes the issue of car crime very seriously. To protect customers’ vehicles our approach is not to disclose our vehicle theft analysis data. The sharing of information could enable thieves to find ways to circumvent anti–theft technologies or make some models particularly attractive to some thieves and unnecessarily vulnerable to attack.
Why are Lexus owners not being invited to install protective plates to their vehicles and why were they only supplied to London Centres?
Lexus offers a free of charge VPP (Vehicle Protection Plate) to any RX450h customer. Every Lexus Centre across the UK has access to this part. Parts were issued to London Centres in the first instance in line with where the demand has occurred, but all Centres can order the VPP. The strategy is however, to focus attention not to the roll-out of the VPP but to a sophisticated vehicle enhancement.
What is the countermeasure and the plan moving forwards?
We are continuously developing technical solutions to make our vehicles more secure and reduce the risk of theft. An enhanced security hardware was introduced in October 2021 on the latest versions of the models that had previously been targeted by criminals. Since then, we have seen a significant drop-off in terms of successful thefts of those models.
Also we are able to supply and fit a VPP (Vehicle Protection Plate) to targeted RX models
We endeavour to make available another solution that can offer enhanced protection. Details will follow in the coming weeks. This will be communicated to the Lexus Centre network, which will also be responsible for fitting the enhanced security solution.
Why is there no recall for vehicles susceptible to the CAN bus attack?
Recall announcements in the UK are guided by very specific guidelines as drawn up by Driver and Vehicle Standards Agency (DVSA). To qualify as a recall, the issue must relate to a safety or thermal type issue where there is potential for injury as a result of vehicle manufacture or component failure. Only in these such circumstances can a recall be announced.
In recall circumstances, the DVSA will provide manufacturers access to ownership records for purpose of communication. Instances of theft do not trigger a recall.
Will Lexus pay for damage caused by an attempted theft?
No. This will need to be addressed by the customer and the vehicle insurers. While we understand theft or attempted theft can be highly upsetting and, in some cases, a costly experience, in such instances customers are first and foremost victims of crime. Lexus does not cover costs associated with criminal activity either under the terms of the warranty or as goodwill.
What is the position with insuring affected models?
As a manufacturer, we stay close to Lexus Insurance colleagues and indeed all motor insurers. We are aware that in many cases, insurance premiums might have increased as a direct result of vehicle crime. We need to refer you to your insurer for further comment.
Hi
Are protection plates available for the UX 250h yet? I called Lexus Glasgow today who had no answer.
Thanks
Hello Hugh,thank you for getting in touch.
There is no information available on the security enhancement just yet.
We are asking people to get in touch with their Lexus Centre,as you have done,so that they can be notified by them when this security enhancement is available.
We will also provide an update the moment we can communicate more.
Thanks,
Lexus UK.
Can you please explain why even Lexus Insurance declined to insure my 2 year old RX 450 h. Paid £800 last year now over £4500 ?
Hello David,
This is a matter you will need to discuss with Lexus Motor Insurance directly.
You can contact their Customer Support team by calling 0330 4042 226.
Thank you.
Is there any further news about the security enhancement?
Hi Michael, thanks for your comment.
We have no further information to offer at the moment and are still working on further safety measures.
Thanks,
Lexus UK
Forgive me for saying this, but Lexus seem to offer platitudes and nothing else. It is simply not good enough to say a fix will soon be in place when patently nothing is happening. Customers want a firm and precise date, not airy fairy suggestions. Having seen my insurance double in cost, I, for one, am seriously considering selling the car given it is becoming an unsustainable cost.
So Lexus, what is your latest take on matters?
The silence is deafening.
Indeed it is!
We had our car stolen off the drive at the weekend NX 300h 2.5 Takumi. .
We had the car serviced last month by our Lexus dealer and no notifications were given about the CANbus issue. and after reading this trail of emails I despair. this has seriously affected my trust in Lexus.
If there is a class action suit please let me have the details.
Hi Mike, we’re so sorry to hear that you have been a victim of this crime.
We are currently working with local authorities and others in the industry on the matter, and are looking into further precautionary measures. No doubt you have already informed the police, but if you have not yet done so please do. We hope your vehicle can be recovered swiftly.
Lexus UK
It has taken my car to be stolen (10/06/2024) for me to actually find out that there was a problem like this. The thieves pulled up and within a minute were driving away with my car. My car has been serviced annually, and had I been told that there was a security issue I could have bought a £60 steering wheel lock as a deterrent. Instead I now have to pay a £192 release fee to the police (yes they found it in a day), buy new number plates, and my local Lexus garage suggest a post theft service to see if any damage has been done at £300! Two other Lexus cars in my road, one with a steering wheel lock was untouched, the other without was attempted to be stolen the same night, but fortunately for them the thieves were disturbed, but they still paid £300 to have the car checked.
I do think Lexus could have done more to let owners know.
Hi Steve, thanks for your comment.
We’re so sorry to hear that you have been a vicitm of this crime, although fortunate that your vehicle could be recovered.
Would you mind sharing the name of your local Lexus Centre that quoted for this check and your registration number? We won’t publish those details publicly, but will take a closer look.
Thanks,
Lexus UK
I was looking at adverts for the RX in Autotrader last week and spotted one that being sold by a main dealer that mentioned that a canbus protective plate had been fitted! (As if it was a special feature). It seems like it was hastily rewritten as I can no longer find it. Can you confirm that Lexus dealers have been told not to mention this (the fitting of these protective plates) in their adverts? Also, are Lexus main dealers still selling used cars without retrofitting the protectives plates on those affected cars? And finally, if the answer is no, are you keeping quiet about the issue (like you did when you sold me my car in February?)
Hi William, thanks for your comment.
Our centres are free to publish their used vehicle adverts as they wish. The availability of the Vehicle Protection Plates has fluctuated over the last few months, but vehicles that are eligible can now have them fitted. We have no further information to offer on the security enhancements at the moment, but all of the latest updates will be posted here on our Magazine.
Thanks,
Lexus UK
So here we are exactly three months from the day that Lexus/Toyota issued a statement concerning the fact that certain of their models are liable to can-bus intrusion. I have a 2019 UX 250h which is susceptible to this form of theft .I have given my details to my local Lexus dealer who by the way sold me the car and never informed me of the aforementioned fault!! How much longer are we going to have to wait for a solution to our problem or are Lexus hoping that we will all go away and forget.
Hi Brian, thanks for your comment.
We are still working on the matter but have no further updates to offer at this time. Any information will be posted here on our Magazine.
Thanks,
Lexus UK
My es350 got stolen today for the second time in broad daylight in under 3 minutes. It is outrageous that a car of this price range has such a serious flaw, yet nothing is being done to remedy this. I assume there will be a lawsuit in the coming years which will no doubt be the demise of this company.
My 2021 RX450h was stolen yesterday (18-06-2024)in front of people and under CCTV in just 4 minutes. Recently had service and I have been in Lexus Hatfield many times. No security issues were discussed or mentioned to me. Didn’t know such a security issue exists. Waiting for the insurance claim but I doubt I will go after a new Lexus car as the silence has affected my trust . Why Lexus is not installing the plates if they are protecting the vehicles? Customers would have paid a small fee to protect their car.
Hello Manos,
We are very sorry to hear that you have been affected by this awful crime.
Please be assured we are continuously developing technical solutions to make our vehicles more secure and reduce the risk of theft.
Once again, we are really sorry that you have been affected by this horrible crime and for the distress this has caused.
We trust that the police and your insurance company are now working closely with you to resolve this matter and minimise any further inconvenience.
If there is anything else that we can assist you with at this time, please let us know.
Thanks.
Your failure to answer Manos’ direct question (along with all the others on here) is making your stock replies seem disingenuous.
I have notified both Lexus UK and my dealer my desire to have the protection plate fitted and software update when available , I am still waiting to be contacted ! If a Ghost immobiliser is retro fitted the car cannot be stolen yet it invalidates the Lexus warranty . The cost of such an immobiliser is justifiable in my opinion in relation to insurance excess costs and peace of mind when leaving the vehicle ! Why don’t Lexus Uk approve fitment of such immobilisers at the dealerships by approved Autowatch fitters whose work could be overseen and approved by Lexus trained technicians and thus not invalidate warranties ? I do believe Lexus is dragging its heels on this one which is not doing the brand any favours , just be open and transparent and let us all know where we stand instead of leaving your so called “valued customers “ without answers !!
Lexus UK are not handling this situation well at all and are causing owners undue stress and inconvenience .
Hello Derek,
Thanks for your comment.
Please be assured that this is a matter we are taking very seriously and are still working on this.
Furthermore, ghost immobilisers are third party products and would not invalidate the warranty, but if a fault occurred due to one being fitted, then we may not support in any repair costs.
We hope this helps.
Thank you.
UX 250h 2020. Reg… Gone…. Keys donated to playgroup as useless.
This is the time to say it’s brand exit stage left..
Insurance has doubled and some in one year just because…
I quote from helpful insurance person.. it’s a ‘ Hybrid’ sir.. we have a difficulty sourcing parts, expensive repairs and parts have gone up and you are now a higher target for thefts.
Noting the new Cyber clause in insurance policies.
Bored now..
Is that something that can happen with only keyless entry enabled?
Hi Bob,
Unfortunately, CAN bus theft, as explained in this article can be undertaken regardless of whether keyless entry is enabled or not.
The thieves disconnect part of the headlamp and use a malicious device to send signals to the control CAN bus (the communication ‘backbone’ within a car) that allow the doors to open and the car to start without the key or remote control.
We hope this helps.
Thank you.
Is my NX450h+ built 2022 (MU70NNA / GJ22BZE) still vulnerable to the Can bus attack?
Is it OK to fit a Ghost 2 immobiliser?
Hello Zill,
Firstly, your NX is not vulnerable to CAN bus theft.
Secondly, we do not have any of our own data to offer advice on 2nd immobiliser/ghost immobiliser, but it is widely reported to us by owners and in the press that these “second stage” immobilisers can be effective in preventing a vehicle from being started, although it would not prevent access into the vehicle.
We hope this helps.
Thanks.
Thank you !
Much appreciated your response.