Hyundai and Kia reached a nationwide settlement with 35 states, led by Minnesota Attorney General Keith Ellison, requiring free repairs to millions of vehicles that lacked engine immobilizers and were left vulnerable to theft. The remedy could cost the automakers over 500 million dollars, and all future US-sold vehicles must include immobilizers, with up to 4.5 million dollars in restitution for theft-damaged vehicles. The settlement addresses a well-documented design weakness exploited in viral theft challenges targeting keyless ignition models. Affected owners must obtain the free software and hardware remedy through dealers.
A February 2022 hack of Kojima Industries, a small supplier of cup holders, USB sockets and interior parts, forced Toyota to halt 14 factories at an estimated cost of about 375 million dollars. The incident illustrates how a low-tier supplier with weak security can disrupt an entire OEM production network. Kojima took months to restore operations to near-normal levels, and the case sits within a broader wave of ransomware attacks on Japanese manufacturers. The event supports supply-chain security requirements and tiered assurance obligations for smaller automotive suppliers.
Affected Vehicle Make & Model
Toyota
Observed MITRE ATT&CK techniques
T1195 Supply Chain CompromiseT1486 Data Encrypted for Impact
Two Tesla crashes on California's Interstate 80 in Solano County on 13 and 22 October 2026 left one pedestrian dead and two police officers seriously injured, with both drivers reporting use of Tesla's Full Self-Driving system. The incidents intensify scrutiny of driver attention and advanced driver-assistance technology on major Northern California corridors.
Researchers found vulnerabilities in a major automaker's connected car platform enabling remote unlocking and control of vehicles in Australia and other regions. Exploiting exposed admin tools, identity credentials, and a firewall path traversal bypass let them mint app tokens and send remote commands, underscoring cybersecurity risk in connected vehicle fleets.
Jaguar Land Rover has begun a controlled, phased restoration of digital systems disrupted by a cyber attack, with sections of its digital estate back online and operations resuming in a managed manner. The incident affected JLR's manufacturing and retail-facing systems, and the recovery announcement lifted parent Tata Motors shares by over 2 percent after a two-day decline. The event underscores the operational and financial exposure automakers face from attacks on production and dealer networks. Recovery work remains ongoing, with suppliers and retail partners notified as systems return.