Hyundai: Difference between revisions

Fireablazin (talk | contribs)
Split out the Keyless Entry Exploit. Added background on the 2025 exploit, Hyundai's Response, and Customer response.
Fireablazin (talk | contribs)
m Additional citations.
 
Line 12: Line 12:
'''[[wikipedia:Hyundai_Motor_Company|Hyundai Motor Company]]''', commonly referred to as '''Hyundai''', is a South Korean multinational automotive manufacturer headquartered in Seoul. Founded in 1967 by Chung Ju-yung, Hyundai is one of the largest car manufacturers in the world, producing a wide range of vehicles, including sedans, SUVs, trucks, and electric vehicles.
'''[[wikipedia:Hyundai_Motor_Company|Hyundai Motor Company]]''', commonly referred to as '''Hyundai''', is a South Korean multinational automotive manufacturer headquartered in Seoul. Founded in 1967 by Chung Ju-yung, Hyundai is one of the largest car manufacturers in the world, producing a wide range of vehicles, including sedans, SUVs, trucks, and electric vehicles.


Hyundai has also been accused of selling customer's telemetry data to third-party [[Verisk]] which then performed risk assessments and generated reports that insurance companies purchased for drivers.
Hyundai has also been accused of selling customer's telemetry data to third-party [[Verisk]] which then performed risk assessments and generated reports that insurance companies purchased for drivers.<ref>{{Cite web |last=Edwards |first=Jesse |date=2024-08-05 |title=Hyundai class action alleges company sells driver data to broker |url=https://topclassactions.com/lawsuit-settlements/lawsuit-news/hyundai-class-action-lawsuit-and-settlement-news/hyundai-class-action-alleges-company-sells-driver-data-to-broker/?utm_source=chatgpt.com |url-status=live |access-date=2025-08-20 |website=Top Class Actions}}</ref><ref>{{Cite web |last=Anderson |first=Brad |date=2024-08-08 |title=Hyundai And Kia Are Selling Your Driving Data To Insurers, Lawsuit Claims |url=https://www.carscoops.com/2024/08/hyundai-and-kia-are-selling-your-driving-data-to-insurers-lawsuit-claims/ |url-status=live |access-date=2025-08-20 |website=Car Scoops}}</ref><ref>{{Cite news |date=2018-04-17 |title=Hyundai Motor America Selects Verisk For Usage-Based Insurance |url=https://www.prnewswire.com/news-releases/hyundai-motor-america-selects-verisk-for-usage-based-insurance-300630938.html?utm_source=chatgpt.com |url-status=live |access-date=2025-08-20 |work=PR Newswire}}</ref>


==Consumer Protection and Right to Repair==
==Consumer Protection and Right to Repair==
Hyundai customers were quoted $56,000 CAD<ref>[https://www.youtube.com/watch?v=EEXieo06ta8 $60,000 to replace battery // 2nd IONIQ 5 case confirms battery price!]</ref> for a new battery pack plus labor cost. This figure has sparked controversy, as it effectively makes replacement economically unfeasible. Hyundai tried to blame the misquote on one "independent" dealer, despite the fact that multiple sources have confirmed identical pricing across authorized dealerships.<ref>[https://www.youtube.com/watch?v=unPVf0sqAKI Hyundai, Why Does an Ioniq Battery Cost $60,000?]</ref>   
Hyundai customers were quoted $56,000 CAD<ref>[https://www.youtube.com/watch?v=EEXieo06ta8 $60,000 to replace battery // 2nd IONIQ 5 case confirms battery price!]</ref> for a new battery pack plus labor cost. This figure has sparked controversy, as it effectively makes replacement economically unfeasible. Hyundai tried to blame the misquote on one "independent" dealer, despite the fact that multiple sources have confirmed identical pricing across authorized dealerships.<ref>[https://www.youtube.com/watch?v=unPVf0sqAKI Hyundai, Why Does an Ioniq Battery Cost $60,000?]</ref>   


== Keyless Entry Exploit ==
==Keyless Entry Exploit==
In August 2025, a flaw was discovered in the security of Hyundai's wireless communications protocol which allows hackers with a "Game Boy-style" device to access the Ioniq 5 and gain physical access to the vehicle without the owner's consent. Hyundai is offering to fix this flaw in their production software for customers who pay a £49 charge.<ref name=":0">{{Cite web |last=Warren |first=Tom |date=2025-08-13 |title=Hyundai wants Ioniq 5 owners to pay to fix a keyless entry security hole |url=https://www.theverge.com/news/757205/hyundai-ioniq-5-security-upgrade-fix-game-boy-device-attacks?utm_source=tldrinfosec |url-status=live |website=The Verge}}</ref>  
In August 2025, a flaw was discovered in the security of Hyundai's wireless communications protocol which allows hackers with a "Game Boy-style" device to access the Ioniq 5 and gain physical access to the vehicle without the owner's consent. Hyundai is offering to fix this flaw in their production software for customers who pay a £49 charge.<ref name=":0">{{Cite web |last=Warren |first=Tom |date=2025-08-13 |title=Hyundai wants Ioniq 5 owners to pay to fix a keyless entry security hole |url=https://www.theverge.com/news/757205/hyundai-ioniq-5-security-upgrade-fix-game-boy-device-attacks?utm_source=tldrinfosec |url-status=live |website=The Verge}}</ref>  


== Background ==
==Background==
Keyless entry systems and push-button start systems in cars are becoming increasingly prevalent, offering drivers greater convenience and enhanced features like remote start. While these systems enhance the user experience, they have also introduced new security challenges, with criminals developing ways to exploit vulnerabilities. These systems have long been vulnerable to relay attacks, a broader issue in the automotive industry documented by security researchers. <ref>{{Cite journal |last=Francillon |first=Aurelien |last2=Danev |first2=Boris |last3=Capkun |first3=Srdjan |date=2010-10-21 |title=Relay Attacks on Passive Keyless Entry and Start Systems in Modern Cars |url=https://eprint.iacr.org/2010/332.pdf |journal=Cryptology ePrint Archive |via=Cryptology ePrint Archive}}</ref> Previous incidents (e.g., Kia “USB hacks”<ref>{{Cite web |last=Stumpf |first=Rob |date=2022-08-02 |title=How Thieves Are Stealing Hyundais and Kias With Just a USB Cable |url=https://www.thedrive.com/news/how-thieves-are-stealing-hyundais-and-kias-with-just-a-usb-cable |url-status=live |access-date=2025-08-20 |website=The Drive}}</ref> and BMW relay thefts<ref>{{Cite web |date=2023-11-27 |title=BMW stolen with “ Remote Relay Attacks “ |url=https://www.ixforums.com/threads/bmw-stolen-with-%E2%80%9C-remote-relay-attacks-%E2%80%9C.2732/ |url-status=live |access-date=2025-08-20 |website=iXforums}}</ref>) illustrate a systemic security problem across the industry.
Keyless entry systems and push-button start systems in cars are becoming increasingly prevalent, offering drivers greater convenience and enhanced features like remote start. While these systems enhance the user experience, they have also introduced new security challenges, with criminals developing ways to exploit vulnerabilities. These systems have long been vulnerable to relay attacks, a broader issue in the automotive industry documented by security researchers. <ref>{{Cite journal |last=Francillon |first=Aurelien |last2=Danev |first2=Boris |last3=Capkun |first3=Srdjan |date=2010-10-21 |title=Relay Attacks on Passive Keyless Entry and Start Systems in Modern Cars |url=https://eprint.iacr.org/2010/332.pdf |journal=Cryptology ePrint Archive |via=Cryptology ePrint Archive}}</ref> Previous incidents (e.g., Kia “USB hacks”<ref>{{Cite web |last=Stumpf |first=Rob |date=2022-08-02 |title=How Thieves Are Stealing Hyundais and Kias With Just a USB Cable |url=https://www.thedrive.com/news/how-thieves-are-stealing-hyundais-and-kias-with-just-a-usb-cable |url-status=live |access-date=2025-08-20 |website=The Drive}}</ref> and BMW relay thefts<ref>{{Cite web |date=2023-11-27 |title=BMW stolen with “ Remote Relay Attacks “ |url=https://www.ixforums.com/threads/bmw-stolen-with-%E2%80%9C-remote-relay-attacks-%E2%80%9C.2732/ |url-status=live |access-date=2025-08-20 |website=iXforums}}</ref>) illustrate a systemic security problem across the industry.


== Hyundai's Response ==
==Hyundai's Response==
Hyundai put out a statement on their website:<ref>{{Cite web |date=2025-08-20 |title=Security and Locking Systems |url=https://www.hyundai.com/uk/en/owners/owning-a-hyundai/security-and-locking-systems.html |url-status=live |archive-url=https://web.archive.org/web/20250821053423/https://www.hyundai.com/uk/en/owners/owning-a-hyundai/security-and-locking-systems.html |archive-date=2025-08-20 |access-date=2025-08-20 |website=Hyundai}}</ref><blockquote>All vehicles produced by Hyundai are developed and certified in accordance with all applicable security and regulatory standards in place at the time of production and sale, including the applied security systems installed.  
Hyundai put out a statement on their website:<ref>{{Cite web |date=2025-08-20 |title=Security and Locking Systems |url=https://www.hyundai.com/uk/en/owners/owning-a-hyundai/security-and-locking-systems.html |url-status=live |archive-url=https://web.archive.org/web/20250821053423/https://www.hyundai.com/uk/en/owners/owning-a-hyundai/security-and-locking-systems.html |archive-date=2025-08-20 |access-date=2025-08-20 |website=Hyundai}}</ref><blockquote>All vehicles produced by Hyundai are developed and certified in accordance with all applicable security and regulatory standards in place at the time of production and sale, including the applied security systems installed.  


Line 30: Line 30:
As part of the Company’s commitment to supporting our customers, we are able to offer a subsidised software and hardware upgrade for a customer contribution of £49.</blockquote>Hyundai’s statement frames the £49 charge as part of their “commitment to supporting customers,” describing the fix as a “subsidised upgrade.” However, this phrasing shifts attention away from the underlying issue—that customers are being asked to pay to address a security vulnerability in the company’s product. While the cost may be reduced, the language used makes it less clear that responsibility for the expense has been placed on owners rather than covered by the manufacturer.
As part of the Company’s commitment to supporting our customers, we are able to offer a subsidised software and hardware upgrade for a customer contribution of £49.</blockquote>Hyundai’s statement frames the £49 charge as part of their “commitment to supporting customers,” describing the fix as a “subsidised upgrade.” However, this phrasing shifts attention away from the underlying issue—that customers are being asked to pay to address a security vulnerability in the company’s product. While the cost may be reduced, the language used makes it less clear that responsibility for the expense has been placed on owners rather than covered by the manufacturer.


== Customer Backlash ==
==Customer Backlash==
Many consumers have expressed sharp frustration and disillusionment over Hyundai's handling of the Ioniq 5 keyless theft vulnerability.<ref name=":0" /><ref>{{Cite web |date=2025-03-29 |title=Hyundai facing legal action over car that can be stolen ‘effortlessly in seconds’ |url=https://www.reddit.com/r/technology/comments/1jmpo7g/hyundai_facing_legal_action_over_car_that_can_be/ |url-status=live |access-date=2025-08-20 |website=Reddit}}</ref> One notable case involves a digital security expert, whose Ioniq 5 was stolen in under 20 seconds using a handheld emulator device disguising itself as a Game Boy.<ref>{{Cite web |last=Ungoed-Thomas |first=Jon |date=2025-03-29 |title=Hyundai facing legal action over car that can be stolen ‘effortlessly in seconds’ |url=https://www.theguardian.com/technology/2025/mar/29/hyundai-facing-legal-action-over-car-that-can-be-stolen-effortlessly-in-seconds?utm_source=chatgpt.com |url-status=live |access-date=2025-08-20 |website=The Guardian}}</ref> The owner says Hyundai had warned him of other modifications the vehicle required, but failed to alert him and other motorists that its security systems were compromised.  
Many consumers have expressed sharp frustration and disillusionment over Hyundai's handling of the Ioniq 5 keyless theft vulnerability.<ref name=":0" /><ref>{{Cite web |date=2025-03-29 |title=Hyundai facing legal action over car that can be stolen ‘effortlessly in seconds’ |url=https://www.reddit.com/r/technology/comments/1jmpo7g/hyundai_facing_legal_action_over_car_that_can_be/ |url-status=live |access-date=2025-08-20 |website=Reddit}}</ref> One notable case involves a digital security expert, whose Ioniq 5 was stolen in under 20 seconds using a handheld emulator device disguising itself as a Game Boy.<ref>{{Cite web |last=Ungoed-Thomas |first=Jon |date=2025-03-29 |title=Hyundai facing legal action over car that can be stolen ‘effortlessly in seconds’ |url=https://www.theguardian.com/technology/2025/mar/29/hyundai-facing-legal-action-over-car-that-can-be-stolen-effortlessly-in-seconds?utm_source=chatgpt.com |url-status=live |access-date=2025-08-20 |website=The Guardian}}</ref> The owner says Hyundai had warned him of other modifications the vehicle required, but failed to alert him and other motorists that its security systems were compromised.