Catch up on stories from the past week (and beyond) at the Slashdot story archive

 



Forgot your password?
typodupeerror
×
Transportation Crime The Courts

Kias and Hyundais Keep Getting Stolen By the Thousands and Cities Are Suing (vice.com) 264

An anonymous reader quotes a report from Motherboard: Cities across the country are suing Kia and Hyundai for failing to install basic anti-theft technology, with a subsequent massive surge of stolen cars burdening police departments, according to lawsuits filed in recent months. Since the beginning of the year, Seattle, Baltimore, Cleveland, New York, Chicago, St. Louis, and Columbus have all sued Kia and Hyundai, which are owned by the same parent company, for selling cars without engine immobilizers, a technology that has served as a major contributor to the plummeting rate of stolen vehicles in the U.S. As the rest of the industry adopted immobilizers, Kia and Hyundai didn't, with only 26 percent of their cars including them in 2015, compared to 96 percent for other manufacturers.

Without the immobilizers, the cars are trivially easy to steal, requiring just a USB cable. A viral Youtube and Tiktok trend instructed people how to steal the cars. Kia and Hyundai cars manufactured without the immobilizers between 2015 and 2020, especially lower-end models like the Accent, Rio, and Sportage, are especially vulnerable. A lawsuit filed by dozens of insurance companies against Kia and Hyundai allege the lack of immobilizers violated federal regulations. The surge in Kia and Hyundai thefts in cities around the country has been staggering and it shows no sign of abating. In a lawsuit filed last week, the City of Chicago said that in 2022, more than 8,800 Kia and Hyundai vehicles were stolen in the city, which accounts for 41 percent of all of Chicago's car thefts, despite Kia and Hyundai making up just seven percent of the city's vehicles. In a press release announcing the lawsuit, the city said it is getting even worse in 2023, with Kias and Hyundais making up more than half of all stolen cars in the city this year. Chicago is hardly alone. [...]

In statements to Motherboard, Kia spokesperson James Bell said the lawsuits filed by cities against the company are "without merit" and that the National Highway Traffic Safety Administration determined it did not violate any regulations or safety standards. In June, NHTSA's acting associate director of enforcement Cem Hatipoglu responded to 18 state attorneys general that asked for a recall of the cars by saying, "At this time, NHTSA has not determined that this issue constitutes either a safety defect or noncompliance requiring a recall." A NHTSA spokesperson told Motherboard the agency has been meeting with Kia and Hyundai about the issue but wouldn't say if it agreed with Kia's interpretation. Hyundai spokesperson Ira Gabriel similarly said that all its vehicles are "fully compliant with federal anti-theft requirements." Hyundai and Kia owners can get steering wheel locks from their local police departments or through dedicated websites. Both companies also offer a free software patch that they say removes the threat of theft, which requires visiting a dealer. Bell of Kia says the company has distributed more than 190,000 wheel locks and that 650,000 vehicles have gotten the software update, out of three million total. Both companies now include immobilizers on all their new cars.

This discussion has been archived. No new comments can be posted.

Kias and Hyundais Keep Getting Stolen By the Thousands and Cities Are Suing

Comments Filter:
  • It's not a USB cable (Score:5, Informative)

    by whoever57 ( 658626 ) on Monday August 28, 2023 @11:37PM (#63804966) Journal

    Without the immobilizers, the cars are trivially easy to steal, requiring just a USB cable.

    It's not a USB cable that people use to steal the cars. They disassemble the lock and then use something to turn the switch. A USB plug is a convenient tool to turn the switch. A thumb drive would work just as well.

    • Too many people are voting this 'Informative.' :D

    • by stooo ( 2202012 ) on Tuesday August 29, 2023 @03:19AM (#63805220) Homepage

      If you use a USB-3.0 compatible cable (blue connector), you can drive the stolen car much faster.
      Unfortunately, those cars are not USB-C compatible, because then you could even recharge the car via the cable.

      • by eegeerg ( 673636 )

        Many are saying that a Monster Cable USB-3.0 with gold connectors will let you steal even faster.

    • Without the immobilizers, the cars are trivially easy to steal, requiring just a USB cable.

      It's not a USB cable that people use to steal the cars. They disassemble the lock and then use something to turn the switch. A USB plug is a convenient tool to turn the switch. A thumb drive would work just as well.

      Or a screwdriver, This is so silly

      • Actually from the photos I've seen, a screwdriver may not work. It looks like the lock cylinder has been completely removed and there's a tab that is sticking out that needs to be turned (normally by the lock cylinder when the correct key is inserted) that happens to fit nicely inside of a USB-A plug to give more surface area to grip for applying torque.

        So really, not a screwdriver as much as a set of pliers, which you are probably using for tearing apart the steering column trim anyway.

    • by Oliver Wendell Jones ( 158103 ) on Tuesday August 29, 2023 @08:16AM (#63805500)
      I love how every article about this makes it sound like all you need is a thumb drive and you can steal a Hyundai or Kia. They gloss over the fact that you have to still get inside of the car somehow and break open the steering column and THEN you can insert something roughly USB shaped into the ignition switch, turn it and drive off.

      Not sure if it's typical fear-mongering headlines, or just shitty reporting.
      • Getting in the car is trivial.

        The alarm only goes off for 30 seconds and most people ignore car alarms anyway. I hear them every day in my neighborhood solely because my neighbors are dumbshits and forget how it works every day, apparently.

        Popping the steering column cover off is generally also trivial. In most vehicles it's 3-5 screws and a couple of plastic clips that hold it on, and then it comes off in two convenient pieces.

        Not sure if it's typical fear-mongering headlines, or just shitty reporting.

        I'm sure you don't know cars.

      • They gloss over the fact that you have to still get inside

        A brick makes that trivial. A car without an engine immobiliser almost universally lacks any kind of alarm.

      • The information in posts above this one were much more informative than TFS (and probably TFA - oh, I see it was on "Vice", in which case TFA was certainly not worth reading).

        My 1983 Ford got stolen in the same way, some time before the idea of "USB" was mooted. As I recall, about then I was agonising between a copy of SCO Unix, or of Coherent from the Mark Williams Company, when I heard about this mad Finn ...

  • I'll best those car owners are super happy about that 10 year warranty that won't help them now.

    • by fahrbot-bot ( 874524 ) on Tuesday August 29, 2023 @01:14AM (#63805094)

      I'll best those car owners are super happy about that 10 year warranty that won't help them now.

      Unfortunately, the warranty doesn't cover theft. :-)

    • I'll best those car owners are super happy about that 10 year warranty that won't help them now.

      It wasn't helping them much before. The commonest problems with these vehicles are in the electrical systems (not all of which is covered for 10 years) or the fuel systems (which are recalled on the relevant vehicles, thus you don't need a warranty.) The 10 year warranty only applies to the powertrain, i.e. just the engine and transmission and possibly their control units and the wiring directly between them and the engine/trans, or between them and the battery.

      Hundreds of thousands of Hyundais and Kias hav

  • Wouldn't it be cheaper and more productive to offer people an add-on immobilizer for these cars? You can get them for under $50.

    Oh, wait. Lawyers and politicians wouldn't get richer that way.

    • You'd still get your car broken into, though. It's not like thieves can tell from the outside.

      • You'd still get your car broken into, though. It's not like thieves can tell from the outside.

        Just *also* (wink, wink) put one of those immobilizer stickers on the side window -- problem solved. :-)

        • by chill ( 34294 )

          No. The thieves don't know details as to WHY the cars are easy to steal, they're just following a trend. There is also an increase in vandalized Hyundai/Kia cars that have immobilizers and can't be stolen this way, but are getting damaged as people try it anyway because all they see is a "Hyundai" or "Kia" badge.

    • by organgtool ( 966989 ) on Monday August 28, 2023 @11:57PM (#63805004)
      The immobilizers are relatively cheap, but like many things today, the labor is expensive. After a brief search online, most quotes for parts and labor combined land somewhere between $300 and $500. Many people are pressed hard enough today to avoid spending that money and just hope it won't happen to them, but citizens are still going to collectively pay for all of the police resources necessary to report stolen vehicles and prosecute the perps. But on the bright side, Kia and Hyundai saved a bit of money and they may even sell more new cars to replace the ones that were totaled during joyrides.
    • by tudza ( 842161 )
      I believe the recall notice I went in to deal with was for this purpose. Thought this wasn't supposed to be an issue with 2023 models. In any case, it is indeed reported that doing this prevents theft of the car but not having your window busted in and steering wheel messed up.
    • That would reduce future thefts, but does nothing about the costs already incurred investigating past thefts which is the entire point of this lawsuit.

  • by bookwormT3 ( 8067412 ) on Monday August 28, 2023 @11:48PM (#63804986)

    Cities across the country are suing Kia

    Slim basis, and something of a Streisand effect.

    A lawsuit filed by dozens of insurance companies

    I'm not a legal expert but this looks like the most understandable non-owner group to take action, and will be resolved in court

    Both companies also offer a free software patch that they say removes the threat of theft,
    Both companies now include immobilizers on all their new cars.

    Problem would have solved itself by making people not want to get their car stolen (or not want to pay the insurance to cover the loss) so not buy the cars. But see, problem is well on the way to solving itself.

  • by bill_mcgonigle ( 4333 ) * on Tuesday August 29, 2023 @12:03AM (#63805014) Homepage Journal

    Call me crazy, but maybe car keys would help?

    • by AmiMoJo ( 196126 )

      Dumb keys are the problem. The same models sold elsewhere in the world come with an immobilizer as standard, which talks to the key to do basic verification that it's genuine, and not someone just forcing the lock to rotate.

    • Car keys turn a physical switch. Some years ago I had to replace a worn ignition switch on my 1996 Acura. Remove two screws and the cover comes off the steering column. Two more screws and you have the physical switch that the key turns. So 10 seconds and a screwdriver is all you need to start the car.

      • Similar on all OBS fords. Pull the cover and you can take out the ignition lock, freeing the column; two torx screws and the ignition switch falls off the bottom of the column, and it has a convenient tab sticking out so you can actuate it manually.

        It was similarly trivial on 1980s-1990s Nissans. Pull the cover, the ignition lock is sitting completely outside of the column, there's great access.

        But these tricks are no longer amusing in a world in which almost all cars have immobilizers.

  • Forcing a recall (Score:5, Informative)

    by silentbozo ( 542534 ) on Tuesday August 29, 2023 @12:16AM (#63805032) Journal

    Interesting part of the complaint.

    "11. Once vehicle theft of Hyundai and Kia models skyrocketed, further expanding the
    public nuisance, Defendants could have easily abated the public nuisance by issuing a recall
    and/or spending approximately $500 per vehicle to install immobilizer devices.4 Instead,
    Defendants again put profits over public safety by passing on the burden of installing
    immobilizer devices to the very same customers they put at risk."

    If I'm interpreting this properly, it's less about getting money from them and forcing them to issue a recall to retrofit all of these cars.

    https://storage.courtlistener.... [courtlistener.com]

    • For clarification, this was the complaint as filed by Seattle.

    • Re: (Score:2, Insightful)

      The insurance companies could have fronted the 500 per car out of the goodness of their hearts as well, they even have a duty to their shareholders to stem the losses while car manufacturers can hardly be held responsible for a fad which struck a decade after sale.

      In the end crime is trivial without total surveillance, just tell the youths what to do on tiktok and they're off.

    • by Zak3056 ( 69287 )

      Defendants could have easily abated the public nuisance by issuing a recall and/or spending approximately $500 per vehicle to install immobilizer devices.

      i.e. "Defendants could have easily spent $1,600,000,000 adding equipment not required by law at time of manufacture to cars they have already sold, up to a decade in the past?" I think the plaintiffs and I have different definitions of "easy" or even "reasonable."

  • At a certain point nobody know who's car it is.

  • Consequences (Score:5, Interesting)

    by rossdee ( 243626 ) on Tuesday August 29, 2023 @01:23AM (#63805106)

    Kia's and Hyundais become targets of stop - and frisk

    Insurance companies either raise premiums for them sky high, or stop insuring them altogether.

    People stop buying them

    ????

    Profit! (For Toyota and Subaru and Nissan etc)

    • I own a vehicle that I once "stole" in 5 minutes with two paperclips (the lock switch broke). Please file additional lawsuits.
    • by AmiMoJo ( 196126 )

      I guess consumer laws are a lot weaker in the US, but in Europe if a manufacturer failed to add basic security features to a car, features that everyone else has had for years, decades even, they would open themselves up to various remedies from the buyers.

      • That's the probable outcome here too, because they're import marques and not likely to receive undeserved protection, but it's not a foregone conclusion. OTOH, the EU mandated immos (and while we're on the subject of mandates, ABS) long, long before the USA did, which meant that it wasn't necessary to have lawsuits like this.

        My 2008 Versa S has an immo, but no ABS. If I could choose I'd have it the other way around, but this was what was available with a stick in my price range. No way I was gonna fuck with

      • by chill ( 34294 )

        It works the same way in the US, but if it isn't a safety or emissions issue, it has to be a specific violation of a regulation. As US federal anti-theft regulations don't require engine immobilizers, the cars are in compliance and not subject to forced remedies. The best the FTC can do is recommend and ask in this case.

        H/K wanted so save some money and cheaped out on the immobilizers. Word got around and now they're getting used and abused, named and shamed.

  • > Seattle, Baltimore, Cleveland, New York, Chicago, St. Louis, and Columbus

    So these cars do have do have immobilizers in Europe?

  • by DrXym ( 126579 ) on Tuesday August 29, 2023 @03:00AM (#63805186)

    ... is probably just disabling whatever command the thieves use to turn the engine on. I'm fairly certain that with the move to software including apps and keyless entry means that a lot of cars are extremely vulnerable to theft. I wouldn't be surprised either if in the years to come cars start getting bricked because some dumbass automaker used certificates that expire in some critical path and they go out of business or cannot be bothered to fix out of warranty cars.

    • They're not using software to steal the cars, they just remove the ignition lock and then turn the switch manually. Per TFS the software patch is to enable a software only immo that is enabled and disabled via the key fob lock and unlock. That they didn't already do this is mind boggling, since it would have cost almost nothing.

    • >... is probably just disabling whatever command the thieves use to turn the engine on.

      Thank you for your insight, however misinformed it is. There is no "command" that the thieves used to steal the car. This is a pure hardware hack. My Sonata was stolen, then recovered. The plastic shroud around the ignition key was removed, the lock portion was of the ignition assembly was forcibly removed exposing a tab that is twisted. A set of jumpers is installed to complete the hack. Twist the tab to start the
      • The down side to the software fix is that you can't just use the key to get in--you have to use the fob. And the fobs can die, and programming a new one can be expensive.

  • by Miles_O'Toole ( 5152533 ) on Tuesday August 29, 2023 @03:22AM (#63805226)

    It's called a "standard transmission". In North America, at least, if thieves see a stick shift, almost certainly they'll just move on to another vehicle.

    • It's called a "standard transmission". In North America, at least, if thieves see a stick shift, almost certainly they'll just move on to another vehicle.

      Yup, the only thief who will steal one with a stick is a pro, and they’re likely looking for something very specific; which if they want it they’ll get it.

      • 100% agreed. If a pro sets their sights on your car specifically, your only chance is a decent insurance package, because you're never going to see it again.

    • by AmiMoJo ( 196126 )

      I'd rather not have to drive a worse car just to avoid it being stolen though. I know, manual gear shift cars are fun to drive vigorously, but for day to day stuff I prefer electric or at least automatic shift.

      Immobilizers are effective and pretty cheap. Kia and Hyundai fit them as standard in most parts of the world.

      • by mjwx ( 966435 )

        I'd rather not have to drive a worse car

        Pretty much why I won't own an automatic.

        • YESSSSSSSSSS!!!!!!! My soon-to-be-former car is an automatic. The deal was too good to pass on, and it's a brilliant machine, but every time I get behind the wheel, I die a little. Its successor WILL be stick.

        • by AmiMoJo ( 196126 )

          Same reason I won't got back to a fossil if I can help it.

      • I have an unusual use case. Most of my day-to-day driving is to schools in small communities, so I spend a lot of time on paved, low traffic, two-lane roads. So for me, manual is by far the best (and most fun) choice. It's also the safest, because you have so much more control over your car in tricky conditions.

        Ironically, I'm driving an automatic at the moment. It's a great car, but it's up for replacement. There's a tach in it, and every time I see that needle jump when the automatic tranny changes g

    • My 2008 Nissan has both a stick shift and an immobilizer. And it was literally the cheapest car in America at the original time of sale. (Mine has AC and cruise control, otherwise it's an absolute base model.) Kias and Hyundais had an immo everywhere else in the world but here. It's utterly reasonable to hold them liable for deliberately compromising security when they didn't even manage to get their prices down as a result. They just pocketed the money!

  • How long til they due dodge over their cars mostly chargers that seem to target of thieves as well.
  • by zazzel ( 98233 ) on Tuesday August 29, 2023 @06:42AM (#63805376)

    I just googled the numbers for Germany and the US. Was shocked to find that the number of car thefts in Germany (2021) was 9,805, while the total for the U.S. recently crossed one million (2022). Unbelievable.

    Adjusted for the number of cars in both countries, a car is 17 more likely to be stolen in the U.S. than in Germany.

  • I remember when Vista came out, there was a trend to have your PC start up, only if you inserted a USB thumb drive into the tower, usually a front USB port, and keep that "key" on your keyring. Well, now the car key is a USB key (no data, just fits the hole)
  • You know, I'm not one that is completely anti-government regulation, but at some point things have got to ease up.

    Backup cameras required. TPI sensors required. 1.5 Gazillion airbags required. Anti-lock brakes required. Now apparently ignition immobilizers should be required.

    If a lot of this stuff eased up there could be significantly more affordable lower end cars for the poorer class - and with the weight savings they'd probably get better fuel economy (a 1995 Honda Civic got as high as 43 MPG combin

    • by stooo ( 2202012 )

      >> Backup cameras required. TPI sensors required. 1.5 Gazillion airbags required. Anti-lock brakes required

      Yep, agree with that statement. They should make the driver airbag optional, for darwinian purposes, so MBGMorden can choose to die.
      The other systems should remain mandatory, as they protect mainly other innocent people not involved in your bad choices.

  • by Orgasmatron ( 8103 ) on Tuesday August 29, 2023 @10:44AM (#63805854)

    The basic ignition lock on a car is in two parts, the lock cylinder, and the electrical switch. The switch does not lock, and the lock does not switch. The traditional method of stealing old cars was to jab a screwdriver into the lock cylinder then apply some leverage to break it. Once the lock cylinder is broken so that it no longer locks, you can use whatever is handy to turn the plug and operate the switch.

    The quality and strength of these mechanical parts varied. Some were relatively flimsy. Some were essentially armored lumps of hardened steel. Most were in the middle - fairly large and robust parts, but made of relatively cheap cast alloy.

    Early immobilizers broke the wire that activated the starter motor. In very early cars, these were hidden switches. A slightly fancier version tapped into a normal switch on the dashboard so that, for example, you had to turn the heater blower to level 3 or you couldn't run the starter. Or, you could use multiple switches that had to be set in combination.

    Many aftermarket alarms included that function internally, so that the starter could only be operated if the alarm was disabled. (Kia's software update implements the UI portion of this system, but not the mechanism.)

    When central locking (unlock the driver's door from the outside with the key and all the other doors unlock at the same time) became common from the factory, some cars included an immobilizer function here too.

    In the 1980s, GM started embedding resistors in their keys, with contacts inside the lock cylinder. At this point, engines were somewhat fully managed electronically, so the computer could compare the resistance of the key with a reference value and refuse to start if it didn't match. There were only a few different resistances, so an attacker could guess, but it was still a slight step up.

    Next came RFID embedded in the key's bow cover, with antenna coils wrapped around the lock cylinder. This has been very common since the early 2000s If you get a new key cut, you also have to get the ECU into learning mode and teach it the code from your new key. (Dealers typically charged an arm and a leg for this service because they were the only ones who had the tools to get the computer into learning mode.)

    Aftermarket remote start systems of this era usually had a compartment where you could put an uncut key blank, but one that had been programmed to the car. There was also a small antenna that you would put inside the steering column near the RFID reader so that the remote starter unit could facilitate the handshake between the uncut blank and the ECU. The blank was left uncut so that it wouldn't operate any of the physical lock cylinders if found by an attacker.

    Push-to-start cars that don't have lock cylinders at all use a longer range version of this (think bluetooth range). This system is typically powered by a small battery in the fob, and there is normally an old RFID tag in there too, and a special place in the car where you can set your key on a hidden short range reader for emergency starts with a dead fob battery.

    The "long" range keyfob typically also has remote lock/unlock/trunk and sometimes remote start buttons, but those are a totally different system.

    Low-end Kia's used the purely mechanical system, with remote lock/unlock buttons on the key. No resistor, no RFID, no long range radio. Unlock or break the cylinder and operate the switch.

    Their software update makes the ECU (which I think is a single computer that runs everything) keep track of remote lock and unlock requests from the key's transmitter, and refuses to start the engine when in the locked state. That means that if you walk up to your car in person and unlock the door by physically turning the key in the driver's door lock, you aren't toggling the ECU's state, and can't start the car unless you also press the unlock button on the key.

  • It's strange that they don't even mention the keyless systems with wireless key fobs which have weak enough encryption so a Bulgarian company made a gameboy-like device that decodes the virtual keys and makes stealing the cars fast and unsuspicious.
    $27,000 Gadget Disguised as Game Boy Used To Steal Cars Worth $245K [motor1.com]
    Thieves all around Europe are using those devices to steal Kia, Hyundai, Mitsubishi, VW, Nissan, and a few other brands of cars that use the same system.

As long as we're going to reinvent the wheel again, we might as well try making it round this time. - Mike Dennison

Working...