Get the latest tech news

Subaru’s poor security left troves of vehicle data easily accessible


Security researchers hacked into an admin portal that also let them remotely control cars. They say Subaru is only one of many automakers tracking vehicles with lax security.

They could also query and retrieve personal information for any customer, including their emergency contacts, authorized users, home address, the last four digits of their credit card and vehicle PIN. Wired notes that Curry and Shah’s previous work exposed similar flaws affecting vehicles from Acura, Genesis, Honda, Hyundai, Infiniti, Kia, Toyota and others. “The auto industry is unique in that an 18-year-old employee from Texas can query the billing information of a vehicle in California, and it won’t really set off any alarm bells,” Curry wrote.

Get the Android app

Or read this on Endgadget

Read more on:

Photo of Subaru

Subaru

Photo of troves

troves

Photo of Poor security

Poor security

Related news:

News photo

Hacking Subaru: Tracking and controlling cars via the admin panel

News photo

License Plate Readers Are Leaking Real-Time Video Feeds and Vehicle Data

News photo

Russian dark web marketplace admins indicted after arrest in Miami. Two men have been indicted for their role in managing a popular Russian dark web marketplace known for selling troves of stolen credit card information and offering cybercrime classes. At its peak in 2023 they had 353,000 "users".