Toyota owners targeted by headlight wiring CAN-bus theft method

Thieves exploit Toyota and Lexus CAN-bus wiring to steal cars within minutes. Experts urge physical deterrents as Toyota develops security responses.

In recent months, Toyota and Lexus owners have increasingly faced a new form of car theft known as CAN injection. Thieves have discovered a weakness in the wiring layout, gaining access through headlight or wheel-arch connectors. Once inside, they plug in a small injector device that sends fake signals through the car’s internal network, convincing the system that a valid key is present. The car then unlocks and starts within minutes, without triggering any alarms.

The technical details of this method were first documented by engineer Ken Tindell of Canis Automotive Labs, who described how criminals tap into CAN_H and CAN_L lines via the headlight to override the immobilizer. The vulnerability became widely known after a confirmed case involving the Toyota RAV4, listed as CVE-2023-29389. Experts note that similar weaknesses also affect other models, including the Lexus NX and UX.

Across Germany and the UK, such thefts are now influencing the insurance market. According to the German Insurance Association (GDV), vehicle thefts in 2024 caused losses exceeding €290 million, with Toyota and Lexus among the most targeted brands. In Britain, the Association of British Insurers (ABI) reported record payouts in 2025, partly due to the growing number of CAN-injection incidents.

While Toyota has not launched a global recall, UK dealers have begun offering physical wheel-well shields and an accessory called the CAN bus gateway blocker, priced at about £329. Similar aftermarket systems are appearing in Germany, where owners install CAN-bus immobilizers costing from €289.

Experts from ADAC and other organizations advise combining electronic and mechanical deterrents. Steering-wheel locks, wheel clamps, and secure parking areas remain some of the most effective ways to prevent theft. Until Toyota implements broader software updates, owners must rely on vigilance—and a bit of old-fashioned caution—to keep their cars safe.