2.2 Million Cars Vulnerable to Bluetooth Theft Exploit

A vulnerability affecting at least 2.2 million cars with anti-theft systems allows thieves to unlock doors and immobilize engines via Bluetooth. Most affected vehicles were sold at Honda, Toyota, Mazda, Ford, and Jeep dealerships in Southern California since 2017. The vulnerability stems from a device installed by dealerships that connects to a smartphone app, which can be exploited from up to five yards away. Many of these vehicles can be identified by stickers labeled 'KARR' or 'SWDS' on the driver’s-side window. The manufacturer, Acrisure, released a patch on July 20, 2026, which requires car owners to download an app to secure their vehicles. However, many owners may be unaware of their vehicle's vulnerability. The vulnerability is exacerbated by the resale of affected vehicles, spreading the risk across the U.S., Canada, and Japan.

Key Points: • Over 2.2 million cars are vulnerable to Bluetooth-based theft attacks. • Affected vehicles primarily sold in Southern California since 2017. • Acrisure released a patch on July 20, 2026, requiring app download for mitigation.