Lexus UK statement on vehicle theft

We take the issue of Toyota and Lexus vehicle theft very seriously. We are continuously developing technical solutions to make our vehicles more secure, to help reduce the risk of theft.

An enhanced security hardware system was introduced in October 2021 on the latest models targeted by criminals. Since which, we have seen a significant drop in thefts of those models.

For older models, we endeavour to create solutions that can offer enhanced protection to our customers.  Following significant investments by Toyota GB, in line with that of other vehicle manufacturers, newly developed official Toyota and Lexus security hardware components will very soon be available to fit to those targeted models registered before October 2021.

Following communication from Lexus in the coming weeks, owners should contact their local dealer to arrange free of charge fitment. Customers can already speak to their local dealer about the fitment of a protective plate to block access to the vehicle’s electronics. This is a nationwide customer care offering.

As a vehicle manufacturer, we can never completely eliminate the risk of vehicle theft. This is an industry-wide issue, concerning all vehicle manufacturers and affecting the most popular models first.

In order to further reduce the theft risk, we regularly collaborate and share information with insurance associations, police and law enforcement authorities, theft prevention experts and other key stakeholders around the world. This enables us to understand new threats and techniques used by thieves and develop more secured systems. 

Alongside our efforts, we urge those authorities to focus on reducing the number of thefts. We would also like to see action taken that leads to the end to the online sale of devices used by criminals to steal cars without using the car keys, as these devices serve no purpose other than a criminal one.

How do thieves manage to steal cars this way?

The thieves disconnect part of the headlamp and use a malicious device to send signals to the control CAN bus (the communication ‘backbone’ within a car) that allow the doors to open and the car to start without the key or remote control.

Thieves need to:

  • Purchase a relatively expensive rogue device (third-party ‘emergency start’ device which costs around £2,500 – £4,000 each)
  • Gain physical access to the vehicle’s CAN bus communication wires for an uninterrupted period.

The third-party ‘emergency start’ device has the capability to initiate an exploit in the following manner:

  • Once connected to the vehicle’s CAN bus communication wires, the third-party ‘emergency start’ device can send a prioritised series of CAN signals to bypass the vehicle’s security and immobiliser systems, which could allow a thief to unlock the doors and turn the vehicle’s ignition ON.
  • The third-party ‘emergency start’ device is then disconnected.
  • At this point a thief can enter the vehicle and start the car without the key

What is Lexus doing to prevent these types of attacks?

Lexus takes the issue of car theft very seriously.  We are continuously developing technical solutions to make our vehicles more secure to help reduce the risk of theft.

In the UK market, an enhanced security hardware was introduced in October 2021 on the latest versions of the models that had previously been targeted by criminals. Since then, we have seen a significant drop-off in terms of successful thefts of those models.

For older models we endeavour to create solutions that can offer enhanced protection to our customers.  We cannot divulge the precise nature of the imminent security enhancement; should we do so we risk offering information into the public domain that could be of interest to criminal parties.

The intention is to make the security enhancement available to all vehicles where a countermeasure is available. 

In October 2021 (introduction of NG NX), a new security platform started to be rolled out. There are no reports of theft using the CAN bus injection method on any model with the new platform.

What models are known to be targeted by this issue and are newer models affected?

The model primarily targeted is the Lexus RX Gen 4. Other models have also been targeted.

Which Lexus models can be fitted with the enhanced security feature?

It can be fitted to previous generation RX, NX, plus ES, LC, LS, RC, GS, UX and UXe

When did Lexus first become aware of the vulnerability in the security system?

It is not so much vulnerability of the security systems but more so the growing rise in criminal gangs targeting vehicles for ‘cannibalisation’ and / or complete theft. Instances appear to have been rising significantly from 2019-2020. There are many factors involved and at a global level. This includes parts of the world experiencing parts shortage which results in targeted thefts to supply vehicles and/or parts sent to countries experiencing trade restrictions.

When is the enhanced security upgrade going to be available and will it be free of charge?

Exact timings are still to be confirmed. We anticipate being able to advise the Lexus Centre network with full details soon. The required enhancement needs to be carried out at a Lexus Centre. Costs are under review and customers may incur a nominal charge.

Are new models such as the LBX targeted by thieves?

While no car can be considered 100% immune to criminal intent, more recent models are equipped with enhanced security systems aimed at deterring CAN bus type thefts.

Given that the rise in this type or car theft has been known for several years in other countries and is growing in the UK why wasn’t I told about this?

Lexus takes the issue of car crime very seriously. To protect customers’ vehicles our approach is not to disclose our vehicle theft analysis data. The sharing of information could enable thieves to find ways to circumvent anti–theft technologies or make some models particularly attractive to some thieves and unnecessarily vulnerable to attack.

Why are Lexus owners not being invited to install protective plates to their vehicles and why were they only supplied to London Centres?

Lexus offers a free of charge VPP (Vehicle Protection Plate) to any RX450h customer.  Every Lexus Centre across the UK has access to this part. Parts were issued to London Centres in the first instance in line with where the demand has occurred, but all Centres can order the VPP. The strategy is however, to focus attention not to the roll-out of the VPP but to a sophisticated vehicle enhancement.

What is the countermeasure and the plan moving forwards?

We are continuously developing technical solutions to make our vehicles more secure and reduce the risk of theft. An enhanced security hardware was introduced in October 2021 on the latest versions of the models that had previously been targeted by criminals. Since then, we have seen a significant drop-off in terms of successful thefts of those models.

Also we are able to supply and fit a VPP (Vehicle Protection Plate) to targeted RX models

We endeavour to make available another solution that can offer enhanced protection. Details will follow in the coming weeks. This will be communicated to the Lexus Centre network, which will also be responsible for fitting the enhanced security solution.

Why is there no recall for vehicles susceptible to the CAN bus attack?

Recall announcements in the UK are guided by very specific guidelines as drawn up by Driver and Vehicle Standards Agency (DVSA).  To qualify as a recall, the issue must relate to a safety or thermal type issue where there is potential for injury as a result of vehicle manufacture or component failure.  Only in these such circumstances can a recall be announced. 

In recall circumstances, the DVSA will provide manufacturers access to ownership records for purpose of communication.  Instances of theft do not trigger a recall.

Will Lexus pay for damage caused by an attempted theft?

No. This will need to be addressed by the customer and the vehicle insurers. While we understand theft or attempted theft can be highly upsetting and, in some cases, a costly experience, in such instances customers are first and foremost victims of crime.  Lexus does not cover costs associated with criminal activity either under the terms of the warranty or as goodwill.

What is the position with insuring affected models?

As a manufacturer, we stay close to Lexus Insurance colleagues and indeed all motor insurers. We are aware that in many cases, insurance premiums might have increased as a direct result of vehicle crime. We need to refer you to your insurer for further comment.

460 comments

  1. I have a 2020 RC300h, is it susceptible to CAN bus theft? If so, what modifications are you going to do to prevent such a theft?

    1. Hi Ian, thanks for getting in touch.

      We will need your full registration number in order to check this.

      Thanks,

      Lexus UK

        1. Hi Ian, thanks for your comment.

          Your Lexus RC is deemed as at risk of CANbus theft. We are working on further security enhancements and hope to have an update soon.

          Thanks,

          Lexus UK

          1. Hi Ian, thanks for getting in touch.

            Please could you remind us of the full registration number.

            Thanks,

            Lexus UK

          2. Hi Ian, thanks for getting in touch.

            We are operating a rollout process for the security enhancements with the highest targeted models being addressed first. If you get in touch with your local Lexus Centre, they’ll be able to keep an eye on the list to see when your vehicle becomes eligible.

            Thanks,

            Lexus UK

  2. Can I ask why CT cars are excluded from the enhanced security feature and why was I not informed of this issue having had my car serviced always at Lexus! Literally spent thousands on servicing and maintenance through your dealer network like others and your treatment and handling of this nationwide issue is truly abysmal as is evident from the comments not only here but on numerous message boards.

    No amount of repeat corporate spiel will dampen the anger faced by your customers and the inevitable damage to your brand will for sure be long lasting.

    Can anything be done for M2***??

    1. Hi there, thanks for getting in touch.

      Your Lexus CT is not deemed as at risk of CANbus theft.

      Thanks,

      Lexus UK

  3. I’m trying to be patient, but Lexus appears to be stringing us along while the criminal fraternity have a field day and can thieve any Lexus vehicle it so desires. My dealer has no clue when/if anything is to happen to address the matter and frankly I have grave doubts Lexus will do anything than to continue to offer worn out platitudes.
    I can already hear the response coming with Lexus being insistent they will offer a fix, but as we all know tomorrow never comes.
    Word to the not so wise, do not offer hope when there is none!

  4. Hi,

    I have a NX300h with Reg **64***.

    Would that be deemed as Vulnerable to CANbus theft and is Lexus currently offering any security enhancements for the model mentioned?

    Thanks,

    1. Hi there, thanks for your comment.

      We will need your full registration number to confirm this.

      Thanks,

      Lexus UK

          1. Good afternoon Saqib,

            Thanks, we can now see your registration but have *** it out for security reasons.

            We can confirm that your 2014 Lexus NX is not susceptible to CAN bus theft.

            Thank you.

    1. Hi Peter, thanks for getting in touch.

      Your Lexus NX is not deemed as at risk of CANbus theft.

      Thanks,

      Lexus UK

  5. Hi,
    I have been a Loyal LEXUS driver for over 2 decades, now that I want to upgrade to a newer lexus vehicle a UX250h from RX450h 2012, all the insurance quotes I am getting are ridiculously high (£1990 cheapest) compared to what I pay now (£643).

    I understand this is due to high level of CANbus thefts. Obviously this situation is not going to be resolved anytime soon by Lexus, and I really can’t imagine of driving another brand except Lexus.

    Lexus are going to lose a lot of customers if we don’t get a solution urgently. They really need to recall all the high risk vehicle and fit some serious security features to avoid vehicles getting stolen.

    For the first time I will have to consider another brand as my ageing high mileage car needs a replacement.

  6. Dear Lexus, I asked my dealer in Surrey if I can pay for of if they will fit a protection plate for my at risk NX and they said they only do this for RX. They would not even allow me to pay for the NX plate fitting. Does this sound correct? We are only 15 miles from London so clearly the cars are in the at risk area frequently.

    1. Hi Jim, thanks for your comment.

      That is correct, Vehicle Protection Plates are currently only available for the RX and the current part will not fit your NX.
      We are working on further security updates and hope to have further information soon.

      Thanks,

      Lexus UK

  7. Hello. I have the following cars
    CT200h VIN JTHKD5BH302331073
    UX300e VIN JTHAABBH402003972

    Is either of them susceptible to CAN bus theft?
    Unless categorically no, when will my local Lexus dealer contact me to arrange the necessary countermeasures?

    Also, I can download map updates but can I download vehicle functional updates for the UX300e?

    1. Good morning Bruce,

      Thanks for your message.

      Your Lexus CT is not susceptible to CAN bus theft however your Lexus UX 300e is susceptible so we’d recommend getting in touch with your local Lexus Centre to be kept informed about additional security measures. They’ll also be happy to advise you on any software updates available for your cars.

      Thank you.

  8. Lexus Uk and their representatives are woeful in their response to the canbus theft of affected models . My local dealer is aware of my desire to have the protection plates fitted to my 2022 RX Takumi and yet they have failed to contact me to advise that the plate is in fact in stock ! It appears that Lexus and its dealers are kicking the can down the road in the misguided hope that the issue will lose traction . I bought into the Lexus brand in part due to local dealer customer support, this is now proving to be a costly mistake on my part due to depreciation of the vehicle , cost of insurance and anxiety every time I park it up ! I have made a significant investment in both my RX and my wife’s new LBX Takumi design and indeed prior to being made aware of this issue I was considering a new RX 500h . I am aware the new models are not susceptible to this type of theft but I honestly cannot support a brand which treats its loyal customers with such apathy and dare I say it contempt !

    1. Good morning Derek,

      Thanks for your message. We’re sorry to hear you feel this way.

      Please send us a private message on any of our social media platforms with your details and we’ll be happy to get in touch with your local Lexus Centre on your behalf.

      Thank you.

  9. Please be more specific on a fix date. Direct line and LV are no longer during my Lexus citing canbus theft issues.

    It’s really hard to recommend a Lexus at present, insuring is a vehicle is a legal requirement and due to the security floor options are shrinking and prices are soaring.

    When will the LC receive an update to resolve the issue? Weeks has tuned into months.

    1. Good afternoon Sappy.

      Thank you for getting in touch.

      We are continuously developing technical solutions to make our vehicles more secure and reduce the risk of theft. While we do not wish to divulge precise details of the security upgrade, essentially, we intend to roll out a CAN Blocker which is an advanced and secondary ECU. Also, we are able to supply and fit a VPP (Vehicle Protection Plate) to targeted RX models. We endeavour to make available another solution that can offer enhanced protection. Details will follow soon. This will be communicated to the Lexus Centre network who will also be responsible for fitting the enhanced security solution.

      There are multiple determining factors that are used to calculate premium, not limited to, individual vehicle, customers circumstances, usage, and home address. We therefore suggest that customers wishing to obtain car insurance contact our specialist Lexus Insurance Services team on 0333 103 9960 for assistance.

      Thank you.

Leave a Reply

Your email address will not be published. Required fields are marked *