**Hyundai and Kia Settle with 35 States Over Anti-Theft Vulnerabilities in Millions of Vehicles**
A nationwide settlement led by Minnesota’s Attorney General Keith Ellison will require Hyundai and Kia to provide free repairs to millions of vehicle owners after a multistate investigation found the automakers failed to equip U.S. models with standard anti-theft technology, leaving them vulnerable to theft.
The agreement, announced Tuesday, follows a surge in Hyundai and Kia thefts linked to viral TikTok videos demonstrating how to steal the cars using only a screwdriver and USB cable. Between 2021 and 2022, thefts of these vehicles skyrocketed—Minneapolis alone reported an 836% increase. The Highway Loss Data Institute found that affected models had a theft claim rate nearly double the industry average (2.18 vs. 1.21 per 1,000 insured vehicle years).
Under the settlement, Hyundai and Kia will cover up to $500 million in repairs for eligible vehicles, spanning model years 2011 to 2022—approximately 9 million cars nationwide. The fix includes installing a zinc sleeve to reinforce ignition cylinders, preventing thieves from bypassing the ignition. Owners will have one year from notification to receive the repair at authorized dealerships, with availability expected from early 2026 to early 2027.
The automakers will also pay up to $4.5 million in restitution for theft-related damages and equip all future U.S. vehicles with engine immobilizers, a standard feature in other markets. Ellison noted that while Hyundai and Kia included immobilizers in cars sold in Canada and Mexico, their absence in U.S. models contributed to thefts, crashes, and fatalities, including incidents involving teenagers.
Kia stated the settlement builds on prior efforts, including a free software upgrade and distribution of steering wheel locks, while Hyundai did not immediately comment. The agreement was reached by 35 states, including California, New York, and Pennsylvania.
Source: https://www.cbsnews.com/news/hyundai-kia-theft-settlement-free-repair-35-states-restitution/
Hyundai TPRM report: https://www.rankiteo.com/company/hyundai-motor-company
Kia TPRM report: https://www.rankiteo.com/company/kia-motors-corporation
"id": "hyukia1765922130",
"linkid": "hyundai-motor-company, kia-motors-corporation",
"type": "Vulnerability",
"date": "12/2025",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"{'affected_entities': [{'customers_affected': 'Millions of Hyundai and Kia '
'owners',
'industry': 'Automotive',
'location': 'United States',
'name': 'Hyundai Motor America',
'size': 'Large (9 million eligible vehicles sold '
'nationwide)',
'type': 'Automaker'},
{'customers_affected': 'Millions of Hyundai and Kia '
'owners',
'industry': 'Automotive',
'location': 'United States',
'name': 'Kia America, Inc.',
'size': 'Large (9 million eligible vehicles sold '
'nationwide)',
'type': 'Automaker'}],
'attack_vector': 'Physical Access (USB cable and screwdriver)',
'customer_advisories': 'Eligible customers should schedule free repairs at '
'authorized dealerships within one year of '
'notification.',
'date_detected': '2021',
'date_publicly_disclosed': '2023',
'description': 'Millions of Hyundai and Kia owners can get free repairs under '
'a settlement due to vehicles lacking proper anti-theft '
'technology, making them vulnerable to thefts. The settlement '
'follows a surge in thefts driven by social media tutorials '
'demonstrating how to steal these vehicles with simple tools.',
'impact': {'brand_reputation_impact': 'Significant negative impact due to '
'thefts and associated crimes',
'financial_loss': '$500 million (estimated cost of free repairs) + '
'$4.5 million restitution',
'legal_liabilities': 'Settlement with 35 states, potential '
'lawsuits from affected individuals',
'operational_impact': 'Repeated vehicle thefts and recoveries, '
'increased insurance claims',
'systems_affected': 'Hyundai and Kia vehicles (2011-2022 models)'},
'investigation_status': 'Settlement reached',
'lessons_learned': 'Automakers must prioritize standard anti-theft '
'technologies in all markets to prevent vulnerabilities '
'exploited by social media trends. Proactive measures, '
'such as software upgrades and hardware modifications, are '
'necessary to mitigate risks.',
'motivation': 'Theft for joyriding, resale, or criminal activities',
'post_incident_analysis': {'corrective_actions': 'Installation of zinc-sleeve '
'hardware, software security '
'upgrades, future vehicles '
'to include engine '
'immobilizers',
'root_causes': 'Lack of engine immobilizers in '
'U.S. models, social media '
'tutorials demonstrating theft '
'methods, delayed response to theft '
'trends'},
'recommendations': '1. Install engine immobilizers as standard in all '
'vehicles. 2. Monitor social media trends for emerging '
'threats. 3. Provide free security upgrades to vulnerable '
'models. 4. Collaborate with law enforcement to address '
'theft trends.',
'references': [{'source': 'CBS News'},
{'source': 'Highway Loss Data Institute'},
{'source': "Minnesota Attorney General's Office"}],
'regulatory_compliance': {'fines_imposed': '$4.5 million restitution',
'legal_actions': 'Settlement with 35 states',
'regulatory_notifications': 'Yes (state attorneys '
'general)'},
'response': {'communication_strategy': 'Public statements, settlement '
'announcements, customer notifications',
'containment_measures': 'Software security upgrade, distribution '
'of steering wheel locks, zinc-sleeve '
'hardware modification',
'incident_response_plan_activated': 'Yes',
'law_enforcement_notified': 'Yes (state attorneys general)',
'recovery_measures': 'Restitution payments to affected '
'individuals, settlement with states',
'remediation_measures': 'Free repairs for eligible vehicles, '
'installation of engine immobilizers in '
'future vehicles'},
'stakeholder_advisories': 'Automakers advised to implement anti-theft '
'technologies universally. Customers advised to '
'seek free repairs and security upgrades.',
'threat_actor': 'Opportunistic thieves, including teenagers',
'title': 'Hyundai and Kia Vehicle Theft Vulnerability Settlement',
'type': 'Physical Security Vulnerability Exploitation',
'vulnerability_exploited': 'Lack of engine immobilizers in certain Hyundai '
'and Kia vehicles'}