Home / Technology / Car Bluetooth Hack: Millions of Vehicles at Risk
Car Bluetooth Hack: Millions of Vehicles at Risk
27 Jul
Summary
- 2.2 million California vehicles have vulnerable Bluetooth security systems.
- Dealer-installed anti-theft devices contain a critical security flaw.
- A universal key allows remote access to unlock doors and control ignition.
Approximately 2.2 million vehicles in California are susceptible to a remote Bluetooth-based attack. This significant security vulnerability originates from dealer-installed anti-theft and tracking devices, specifically KARR and SWDS systems manufactured by Acrisure. Researchers from the University of California San Diego identified that these systems, often installed since 2017 in vehicles from brands like Honda, Toyota, and Ford, share a common, exploitable secure key.
The hack allows unauthorized individuals to remotely unlock vehicle doors, and potentially control the ignition and other functions via a mobile app. Worryingly, the hardware for this system is present even if a user has not subscribed to the service. The complexity of removing the device, which requires altering dashboard wiring, presents a significant challenge for affected owners.
