Leaderboard

I asked on the Lexus mag forum about the vulnerability of the IS 300h to CANbus vulnerability through the headlights as it wasn't in the list of cars due for any retrofit, both for my current 2014 model (which shouldn't be vulnerable) and if I purchased a post face-lift 2017 model (which I thought might be) - this is the reply they posted: Hello Phil, Thanks for your question. Your current IS 300h is not impacted as the technology that enables CAN bus theft isn’t in those vehicles. While no car can be considered 100% immune to criminal intent, our Product Technical team have also advised that the IS 300h from October 2016 to September 2020 Production is not affected by CAN bus theft due to the platform of the vehicle. We hope this helps. Thanks.

Hi all, just a quick update on the car - I've recently had the clutch replaced, as the original had started to slip quite badly. I suspected the flywheel was starting to go bad also, so took the opportunity to have this replaced at the same time. For those interested, I went with the Exedy OE replacement clutch kit and a Lexus DMF (sourced from Lexus Parts Direct, at a price much cheaper than quoted by various Lexus dealers!). Although this (inevitably) was a very expensive repair, I'm pleased to say it drives much smoother than ever before. Here is how the car is looking at the moment: Here's a short overview of what I'd like to do to the car this year: - Android head unit (Teyes CC3, or similar - thanks for the heads-up, @H3XME!): as mentioned, I've grown tired of the lack of infotainment and would like to add a reverse camera (not sure if anyone else finds the rear visibility quite poor?) - Missing trim pieces: I'd like to replace a couple of trim pieces that were missing when I bought the car - Replacement number plates: the current 3D-style ones are definitely not for me, and I would have sorted them long ago if they weren't bonded on! - Machine polish: there are a few light scratches and swirls that I'd like to sort out at some point - Alloy refurb: the current alloys are in quite a poor cosmetic state, although I'm yet to decide if I'd rather replace them altogether (I quite like the forged Nissan Rays alloys, although open to suggestions!) Thanks again for reading!

That’s correct. Whilst the facelift model has CAN bus controlled headlights, they are on a separate bus to the one the central locking system is connected to so you cannot directly inject a signal.

Tax savings for company cars, and salary sacrifice schemes, means that new EVs are relatively cheap - but with leases typically only being 2 to 3 years in duration means these soon come onto the used car market and private buyers aren't purchasing them at the same rate - hence values have dropped. But having said that the number for sale is not disproportionate. Last year the market share for EVs was 19.7% of all new car sales. Autotrader currently has 18.8% EVs for sale out of all the 2023 cars listed.

I'm taking delivery of a new RX this week and is coming complete with 2 keys I am told!!!

I tried - I was told that none of your insurers could provide a quote for the original edition either.

Has anyone taken out the blower motor/fan on an RC/RCF? Just want to get an idea of difficulty before I take it to Lexus. Mine started making an annoying noise last week. Sounded like something caught in the fan at first, now turned into a pretty nasty squeaky kind of noise that's present constantly unless I turn the climate control fully off. Not too thrilled that I'm already dealing with my second gremlin with the car, but maybe it will be an easy fix...

In 2023, in the UK, only 16.5% of new cars registered were EV - in percentage terms, this was down slightly on 2022! https://www.bbc.co.uk/news/business-68199898

I understand your point of view - they damaged it so they have to fix it... However, I also believe that at least secondary goal is to get the car fixed as soon as reasonably possible and at the price which is fair for both party at fault and at the same time does not leave you in worse position than you were before the accident. Paying £6.5k to fix bumper and bonnet on the car which it self costs maybe £5k isn't really fair amount. Even if the car wash is willing to pay that price, there is still no gain on your side if they overpay for your car repairs, however it is more likely to complicate the repairs as they may feel it isn't fair price (because it isn't) and then simply stop cooperating. And if they do stop cooperating then it will be very hard to change that (only via court). So at least in my mind it seems that seeking compromise would be best for both parties. In such case I probably would take the estimates for repair and say something along the lines - "look that is what it officially costs to fix the car, but we both understand this is unrealistic, instead let's agree you pay me amount X and I get the car fixed at reasonable price = win-win". What that "reasonable" amount would be is for you to decide, but let's just hypothetically say that repair cost is £2000, so I probably would ask for £2500 for my trouble. Then would fix the car for £1500 and keep the £1000 for future maintenance or some nice modification or upgrade, or just keep the money. The reason I am saying this is not that I want to sell the parts, as mentioned neither bumpers available really suits your needs as your car does not have headlight washers. The holes for washers could be welded/filled etc. (not doing it would cause issues in MOT, even if your car technically does not need to have washers, you could fail because they seems to be present but do not work). So the reason I am saying this is because I know how difficult is to force somebody to pay for repairs if they decide to be uncooperative.

I was one year, January 23 to Jan 24 to get key and locking wheel nuts. RX owner.

Got mine in just under 6 months in January, but told the time was starting to come down. still waiting for the locking wheel bolts after 8 months - anybody got any updates on these?

The government has already announced that EVs will start paying car tax (existing and new) from April 2025. New EVs from April 2025 will also (again) pay the luxury car tax if list price is over £40k. We can therefore expect nearly every new EV to be paying north of £600 per year in VED, and more as this increases yearly by inflation.

An interesting article John. https://www.thisismoney.co.uk/money/markets/article-13204529/As-Chinas-BYD-floods-Europe-cheap-electric-cars-old-fashioned-tariffs-slam-brakes.html?ico=mol_desktop_home-newtab&molReferrerUrl=https%3A%2F%2Fwww.dailymail.co.uk%2Fhome%2Findex.html&_ga=2.148594679.1593155482.1709886205-1301590612.1699347836&_gl=1*1mc4xu5*_ga*MTMwMTU5MDYxMi4xNjk5MzQ3ODM2*_ga_XE0XLFFF16*MTcxMDY2MDk1My40MDIuMS4xNzEwNjYyMTQ1LjAuMC4w

I'm very interested to hear how you get on with it, as it's something I plan (or at least home) to move onto in a few years. I'm currently in a 2014 RX and when the NX450h+ came out I thought that would be a strong consideration for the future. I had one as a loan car, but somehow it just didn't do it for me Earlier this year I had a go in a new RX450h+ and that was much more like it. My current car should last long enough to get me to a point where secondhand 5th gen RXs are within budget. My preference would be a Premium, as I like the fact it has 19" wheels which would suit the rural area I live. I'm sure it still has more than enough toys....

I bought my RZ in June 23 and I got the second key and locking wheel nuts in January. Might be a bit quicker now

Lovely car

It was (is?) about 6 months before you receive the second key but the wait time was apparently coming down. You would assume that new cars would eventually come with both keys.

Perhaps spend a bit more time on their cars, rather than PR. I had a recent survey from them saying “how did I feel about receiving a packets of wild flowers to plant with a new Lexus car” !!! The range story is disappointing when Toyota made the right call saying that Volvo, and others, were mad to announce electric only cars from 2025. Making the comment that there is still 1b people in the world without any electricity.

Celebratory at 100k miles …….. I’ll just make sure I’m still around to use them each, every other day, coz I just KNOW that’s what keeps them in fine fettle ……. oh, and a bottle of Aldi Prosecco too on the day …… maybe a month hence 😄 Malc am I a cheapskate 🤩

Pretty much what my dealer emailed me yesterday, no plates for the LC but will keep me "updated on any further security updates" as they are received from Lexus. I'm still hopeful the encryption technique will provide a solution, but when seems a bit of a guess right now.

A noteworthy achievement, Malcolm. What are your plans for commemorating the magical mileage moment of attaining the 100K mark?? Unfortunately, I see I have a prior engagement, but will be with you both in spirit.

@eightk here are some pics of mine (not the best pics out there). Took delivery on Friday and loving the car!

Many insurance companies don't care about having to declare factory built options. It was the same with my wife's UX which has Premium Plus and Tech packs but is just listed as a base grade UX on insurance and they said that was fine when queried with them. Ring and speak to someone if you are unsure, and keep a record of the time/date and who you spoke to.

"catching noise". You might want to try it with a couple of spoons of 3 Noughts. Always worked for me.😄

Nightmare innit! Have you considered moving to somewhere nicer? Not being funny but London seems to be a right pain of a place to live at the moment

It goes off automatically after a few days.

We take the issue of Toyota and Lexus vehicle theft very seriously. We are continuously developing technical solutions to make our vehicles more secure, to help reduce the risk of theft. An enhanced security hardware system was introduced in October 2021 on the latest models targeted by criminals. Since which, we have seen a significant drop in thefts of those models. For older models, we endeavour to create solutions that can offer enhanced protection to our customers. Following significant investments by Toyota GB, in line with that of other vehicle manufacturers, newly developed official Toyota and Lexus security hardware components will very soon be available to fit to those targeted models registered before October 2021. Following communication from Lexus in the coming weeks, owners should contact their local dealer to arrange free of charge fitment. Customers can already speak to their local dealer about the fitment of a protective plate to block access to the vehicle’s electronics. This is a nationwide customer care offering. As a vehicle manufacturer, we can never completely eliminate the risk of vehicle theft. This is an industry-wide issue, concerning all vehicle manufacturers and affecting the most popular models first. In order to further reduce the theft risk, we regularly collaborate and share information with insurance associations, police and law enforcement authorities, theft prevention experts and other key stakeholders around the world. This enables us to understand new threats and techniques used by thieves and develop more secured systems. Alongside our efforts, we urge those authorities to focus on reducing the number of thefts. We would also like to see action taken that leads to the end to the online sale of devices used by criminals to steal cars without using the car keys, as these devices serve no purpose other than a criminal one. How do thieves manage to steal cars this way? The thieves disconnect part of the headlamp and use a malicious device to send signals to the control CAN bus (the communication ‘backbone’ within a car) that allow the doors to open and the car to start without the key or remote control. Thieves need to: Purchase a relatively expensive rogue device (third-party ‘emergency start’ device which costs around £2,500 – £4,000 each) Gain physical access to the vehicle’s CAN bus communication wires for an uninterrupted period. The third-party ‘emergency start’ device has the capability to initiate an exploit in the following manner: Once connected to the vehicle’s CAN bus communication wires, the third-party ‘emergency start’ device can send a prioritised series of CAN signals to bypass the vehicle’s security and immobiliser systems, which could allow a thief to unlock the doors and turn the vehicle’s ignition ON. The third-party ‘emergency start’ device is then disconnected. At this point a thief can enter the vehicle and start the car without the key What is Lexus doing to prevent these types of attacks? Lexus takes the issue of car theft very seriously. We are continuously developing technical solutions to make our vehicles more secure to help reduce the risk of theft. In the UK market, an enhanced security hardware was introduced in October 2021 on the latest versions of the models that had previously been targeted by criminals. Since then, we have seen a significant drop-off in terms of successful thefts of those models. For older models we endeavour to create solutions that can offer enhanced protection to our customers. We cannot divulge the precise nature of the imminent security enhancement; should we do so we risk offering information into the public domain that could be of interest to criminal parties. The intention is to make the security enhancement available to all vehicles where a countermeasure is available. In October 2021 (introduction of NG NX), a new security platform started to be rolled out. There are no reports of theft using the CAN bus injection method on any model with the new platform. What models are known to be targeted by this issue and are newer models affected? The model primarily targeted is the Lexus RX Gen 4. Other models have also been targeted. Which Lexus models can be fitted with the enhanced security feature? It can be fitted to previous generation RX, NX, plus ES, LC, LS, RC, GS, UX and UXe Which models are affected by year? Lexus models Affected years/months Lexus LC / LC-C 2017/03 – 2024/03 Lexus RC 2017/03 – 2024/03 Lexus RX / RX L 450h 2015/10 – 2022/10 Lexus ES 2018/10 – 2024/02 Lexus GS / GS-F 2015/11 – 2020/11 Lexus NX 2017/09 – 2021/10 Lexus LS 2017/10 – 2022/09 Lexus UX / UXe 2018/10 – 2023/12 When did Lexus first become aware of the vulnerability in the security system? It is not so much vulnerability of the security systems but more so the growing rise in criminal gangs targeting vehicles for ‘cannibalisation’ and / or complete theft. Instances appear to have been rising significantly from 2019-2020. There are many factors involved and at a global level. This includes parts of the world experiencing parts shortage which results in targeted thefts to supply vehicles and/or parts sent to countries experiencing trade restrictions. When is the enhanced security upgrade going to be available and will it be free of charge? Exact timings are still to be confirmed. We anticipate being able to advise the Lexus Centre network with full details before the end of April 2024. The required enhancement needs to be carried out at a Lexus Centre. Costs are under review and customers may incur a nominal charge. Are new models such as the LBX targeted by thieves? While no car can be considered 100% immune to criminal intent, more recent models are equipped with enhanced security systems aimed at deterring CAN bus type thefts. Given that the rise in this type or car theft has been known for several years in other countries and is growing in the UK why wasn’t I told about this? Lexus takes the issue of car crime very seriously. To protect customers’ vehicles our approach is not to disclose our vehicle theft analysis data. The sharing of information could enable thieves to find ways to circumvent anti–theft technologies or make some models particularly attractive to some thieves and unnecessarily vulnerable to attack. Why are Lexus owners not being invited to install protective plates to their vehicles and why were they only supplied to London Centres? Lexus offers a free of charge VPP (Vehicle Protection Plate) to any RX450h customer. Every Lexus Centre across the UK has access to this part. Parts were issued to London Centres in the first instance in line with where the demand has occurred, but all Centres can order the VPP. The strategy is however, to focus attention not to the roll-out of the VPP but to a sophisticated vehicle enhancement. What is the countermeasure and the plan moving forwards? We are continuously developing technical solutions to make our vehicles more secure and reduce the risk of theft. An enhanced security hardware was introduced in October 2021 on the latest versions of the models that had previously been targeted by criminals. Since then, we have seen a significant drop-off in terms of successful thefts of those models. Also we are able to supply and fit a VPP (Vehicle Protection Plate) to targeted RX models We endeavour to make available another solution that can offer enhanced protection. Details will follow in the coming weeks. This will be communicated to the Lexus Centre network, which will also be responsible for fitting the enhanced security solution. Why is there no recall for vehicles susceptible to the CAN bus attack? Recall announcements in the UK are guided by very specific guidelines as drawn up by Driver and Vehicle Standards Agency (DVSA). To qualify as a recall, the issue must relate to a safety or thermal type issue where there is potential for injury as a result of vehicle manufacture or component failure. Only in these such circumstances can a recall be announced. In recall circumstances, the DVSA will provide manufacturers access to ownership records for purpose of communication. Instances of theft do not trigger a recall. Will Lexus pay for damage caused by an attempted theft? No. This will need to be addressed by the customer and the vehicle insurers. While we understand theft or attempted theft can be highly upsetting and, in some cases, a costly experience, in such instances customers are first and foremost victims of crime. Lexus does not cover costs associated with criminal activity either under the terms of the warranty or as goodwill. What is the position with insuring affected models? As a manufacturer, we stay close to Lexus Insurance colleagues and indeed all motor insurers. We are aware that in many cases, insurance premiums might have increased as a direct result of vehicle crime. We need to refer you to your insurer for further comment. https://mag.lexus.co.uk/lexus-uk-statement-on-vehicle-theft

We take the issue of Toyota and Lexus vehicle theft very seriously. We are continuously developing technical solutions to make our vehicles more secure, to help reduce the risk of theft. An enhanced security hardware system was introduced in October 2021 on the latest models targeted by criminals. Since which, we have seen a significant drop in thefts of those models. For older models, we endeavour to create solutions that can offer enhanced protection to our customers. Following significant investments by Toyota GB, in line with that of other vehicle manufacturers, newly developed official Toyota and Lexus security hardware components will very soon be available to fit to those targeted models registered before October 2021. Following communication from Lexus in the coming weeks, owners should contact their local dealer to arrange free of charge fitment. Customers can already speak to their local dealer about the fitment of a protective plate to block access to the vehicle’s electronics. This is a nationwide customer care offering. As a vehicle manufacturer, we can never completely eliminate the risk of vehicle theft. This is an industry-wide issue, concerning all vehicle manufacturers and affecting the most popular models first. In order to further reduce the theft risk, we regularly collaborate and share information with insurance associations, police and law enforcement authorities, theft prevention experts and other key stakeholders around the world. This enables us to understand new threats and techniques used by thieves and develop more secured systems. Alongside our efforts, we urge those authorities to focus on reducing the number of thefts. We would also like to see action taken that leads to the end to the online sale of devices used by criminals to steal cars without using the car keys, as these devices serve no purpose other than a criminal one. How do thieves manage to steal cars this way? The thieves disconnect part of the headlamp and use a malicious device to send signals to the control CAN bus (the communication ‘backbone’ within a car) that allow the doors to open and the car to start without the key or remote control. Thieves need to: Purchase a relatively expensive rogue device (third-party ‘emergency start’ device which costs around £2,500 – £4,000 each) Gain physical access to the vehicle’s CAN bus communication wires for an uninterrupted period. The third-party ‘emergency start’ device has the capability to initiate an exploit in the following manner: Once connected to the vehicle’s CAN bus communication wires, the third-party ‘emergency start’ device can send a prioritised series of CAN signals to bypass the vehicle’s security and immobiliser systems, which could allow a thief to unlock the doors and turn the vehicle’s ignition ON. The third-party ‘emergency start’ device is then disconnected. At this point a thief can enter the vehicle and start the car without the key What is Lexus doing to prevent these types of attacks? Lexus takes the issue of car theft very seriously. We are continuously developing technical solutions to make our vehicles more secure to help reduce the risk of theft. In the UK market, an enhanced security hardware was introduced in October 2021 on the latest versions of the models that had previously been targeted by criminals. Since then, we have seen a significant drop-off in terms of successful thefts of those models. For older models we endeavour to create solutions that can offer enhanced protection to our customers. We cannot divulge the precise nature of the imminent security enhancement; should we do so we risk offering information into the public domain that could be of interest to criminal parties. The intention is to make the security enhancement available to all vehicles where a countermeasure is available. In October 2021 (introduction of NG NX), a new security platform started to be rolled out. There are no reports of theft using the CAN bus injection method on any model with the new platform. What models are known to be targeted by this issue and are newer models affected? The model primarily targeted is the Lexus RX Gen 4. Other models have also been targeted. Which Lexus models can be fitted with the enhanced security feature? It can be fitted to previous generation RX, NX, plus ES, LC, LS, RC, GS, UX and UXe Which models are affected by year? Lexus models Affected years/months Lexus LC / LC-C 2017/03 – 2024/03 Lexus RC 2017/03 – 2024/03 Lexus RX / RX L 450h 2015/10 – 2022/10 Lexus ES 2018/10 – 2024/02 Lexus GS / GS-F 2015/11 – 2020/11 Lexus NX 2017/09 – 2021/10 Lexus LS 2017/10 – 2022/09 Lexus UX / UXe 2018/10 – 2023/12 When did Lexus first become aware of the vulnerability in the security system? It is not so much vulnerability of the security systems but more so the growing rise in criminal gangs targeting vehicles for ‘cannibalisation’ and / or complete theft. Instances appear to have been rising significantly from 2019-2020. There are many factors involved and at a global level. This includes parts of the world experiencing parts shortage which results in targeted thefts to supply vehicles and/or parts sent to countries experiencing trade restrictions. When is the enhanced security upgrade going to be available and will it be free of charge? Exact timings are still to be confirmed. We anticipate being able to advise the Lexus Centre network with full details before the end of April 2024. The required enhancement needs to be carried out at a Lexus Centre. Costs are under review and customers may incur a nominal charge. Are new models such as the LBX targeted by thieves? While no car can be considered 100% immune to criminal intent, more recent models are equipped with enhanced security systems aimed at deterring CAN bus type thefts. Given that the rise in this type or car theft has been known for several years in other countries and is growing in the UK why wasn’t I told about this? Lexus takes the issue of car crime very seriously. To protect customers’ vehicles our approach is not to disclose our vehicle theft analysis data. The sharing of information could enable thieves to find ways to circumvent anti–theft technologies or make some models particularly attractive to some thieves and unnecessarily vulnerable to attack. Why are Lexus owners not being invited to install protective plates to their vehicles and why were they only supplied to London Centres? Lexus offers a free of charge VPP (Vehicle Protection Plate) to any RX450h customer. Every Lexus Centre across the UK has access to this part. Parts were issued to London Centres in the first instance in line with where the demand has occurred, but all Centres can order the VPP. The strategy is however, to focus attention not to the roll-out of the VPP but to a sophisticated vehicle enhancement. What is the countermeasure and the plan moving forwards? We are continuously developing technical solutions to make our vehicles more secure and reduce the risk of theft. An enhanced security hardware was introduced in October 2021 on the latest versions of the models that had previously been targeted by criminals. Since then, we have seen a significant drop-off in terms of successful thefts of those models. Also we are able to supply and fit a VPP (Vehicle Protection Plate) to targeted RX models We endeavour to make available another solution that can offer enhanced protection. Details will follow in the coming weeks. This will be communicated to the Lexus Centre network, which will also be responsible for fitting the enhanced security solution. Why is there no recall for vehicles susceptible to the CAN bus attack? Recall announcements in the UK are guided by very specific guidelines as drawn up by Driver and Vehicle Standards Agency (DVSA). To qualify as a recall, the issue must relate to a safety or thermal type issue where there is potential for injury as a result of vehicle manufacture or component failure. Only in these such circumstances can a recall be announced. In recall circumstances, the DVSA will provide manufacturers access to ownership records for purpose of communication. Instances of theft do not trigger a recall. Will Lexus pay for damage caused by an attempted theft? No. This will need to be addressed by the customer and the vehicle insurers. While we understand theft or attempted theft can be highly upsetting and, in some cases, a costly experience, in such instances customers are first and foremost victims of crime. Lexus does not cover costs associated with criminal activity either under the terms of the warranty or as goodwill. What is the position with insuring affected models? As a manufacturer, we stay close to Lexus Insurance colleagues and indeed all motor insurers. We are aware that in many cases, insurance premiums might have increased as a direct result of vehicle crime. We need to refer you to your insurer for further comment. https://mag.lexus.co.uk/lexus-uk-statement-on-vehicle-theft

We take the issue of Toyota and Lexus vehicle theft very seriously. We are continuously developing technical solutions to make our vehicles more secure, to help reduce the risk of theft. An enhanced security hardware system was introduced in October 2021 on the latest models targeted by criminals. Since which, we have seen a significant drop in thefts of those models. For older models, we endeavour to create solutions that can offer enhanced protection to our customers. Following significant investments by Toyota GB, in line with that of other vehicle manufacturers, newly developed official Toyota and Lexus security hardware components will very soon be available to fit to those targeted models registered before October 2021. Following communication from Lexus in the coming weeks, owners should contact their local dealer to arrange free of charge fitment. Customers can already speak to their local dealer about the fitment of a protective plate to block access to the vehicle’s electronics. This is a nationwide customer care offering. As a vehicle manufacturer, we can never completely eliminate the risk of vehicle theft. This is an industry-wide issue, concerning all vehicle manufacturers and affecting the most popular models first. In order to further reduce the theft risk, we regularly collaborate and share information with insurance associations, police and law enforcement authorities, theft prevention experts and other key stakeholders around the world. This enables us to understand new threats and techniques used by thieves and develop more secured systems. Alongside our efforts, we urge those authorities to focus on reducing the number of thefts. We would also like to see action taken that leads to the end to the online sale of devices used by criminals to steal cars without using the car keys, as these devices serve no purpose other than a criminal one. How do thieves manage to steal cars this way? The thieves disconnect part of the headlamp and use a malicious device to send signals to the control CAN bus (the communication ‘backbone’ within a car) that allow the doors to open and the car to start without the key or remote control. Thieves need to: Purchase a relatively expensive rogue device (third-party ‘emergency start’ device which costs around £2,500 – £4,000 each) Gain physical access to the vehicle’s CAN bus communication wires for an uninterrupted period. The third-party ‘emergency start’ device has the capability to initiate an exploit in the following manner: Once connected to the vehicle’s CAN bus communication wires, the third-party ‘emergency start’ device can send a prioritised series of CAN signals to bypass the vehicle’s security and immobiliser systems, which could allow a thief to unlock the doors and turn the vehicle’s ignition ON. The third-party ‘emergency start’ device is then disconnected. At this point a thief can enter the vehicle and start the car without the key What is Lexus doing to prevent these types of attacks? Lexus takes the issue of car theft very seriously. We are continuously developing technical solutions to make our vehicles more secure to help reduce the risk of theft. In the UK market, an enhanced security hardware was introduced in October 2021 on the latest versions of the models that had previously been targeted by criminals. Since then, we have seen a significant drop-off in terms of successful thefts of those models. For older models we endeavour to create solutions that can offer enhanced protection to our customers. We cannot divulge the precise nature of the imminent security enhancement; should we do so we risk offering information into the public domain that could be of interest to criminal parties. The intention is to make the security enhancement available to all vehicles where a countermeasure is available. In October 2021 (introduction of NG NX), a new security platform started to be rolled out. There are no reports of theft using the CAN bus injection method on any model with the new platform. What models are known to be targeted by this issue and are newer models affected? The model primarily targeted is the Lexus RX Gen 4. Other models have also been targeted. Which Lexus models can be fitted with the enhanced security feature? It can be fitted to previous generation RX, NX, plus ES, LC, LS, RC, GS, UX and UXe Which models are affected by year? Lexus models Affected years/months Lexus LC / LC-C 2017/03 – 2024/03 Lexus RC 2017/03 – 2024/03 Lexus RX / RX L 450h 2015/10 – 2022/10 Lexus ES 2018/10 – 2024/02 Lexus GS / GS-F 2015/11 – 2020/11 Lexus NX 2017/09 – 2021/10 Lexus LS 2017/10 – 2022/09 Lexus UX / UXe 2018/10 – 2023/12 When did Lexus first become aware of the vulnerability in the security system? It is not so much vulnerability of the security systems but more so the growing rise in criminal gangs targeting vehicles for ‘cannibalisation’ and / or complete theft. Instances appear to have been rising significantly from 2019-2020. There are many factors involved and at a global level. This includes parts of the world experiencing parts shortage which results in targeted thefts to supply vehicles and/or parts sent to countries experiencing trade restrictions. When is the enhanced security upgrade going to be available and will it be free of charge? Exact timings are still to be confirmed. We anticipate being able to advise the Lexus Centre network with full details before the end of April 2024. The required enhancement needs to be carried out at a Lexus Centre. Costs are under review and customers may incur a nominal charge. Are new models such as the LBX targeted by thieves? While no car can be considered 100% immune to criminal intent, more recent models are equipped with enhanced security systems aimed at deterring CAN bus type thefts. Given that the rise in this type or car theft has been known for several years in other countries and is growing in the UK why wasn’t I told about this? Lexus takes the issue of car crime very seriously. To protect customers’ vehicles our approach is not to disclose our vehicle theft analysis data. The sharing of information could enable thieves to find ways to circumvent anti–theft technologies or make some models particularly attractive to some thieves and unnecessarily vulnerable to attack. Why are Lexus owners not being invited to install protective plates to their vehicles and why were they only supplied to London Centres? Lexus offers a free of charge VPP (Vehicle Protection Plate) to any RX450h customer. Every Lexus Centre across the UK has access to this part. Parts were issued to London Centres in the first instance in line with where the demand has occurred, but all Centres can order the VPP. The strategy is however, to focus attention not to the roll-out of the VPP but to a sophisticated vehicle enhancement. What is the countermeasure and the plan moving forwards? We are continuously developing technical solutions to make our vehicles more secure and reduce the risk of theft. An enhanced security hardware was introduced in October 2021 on the latest versions of the models that had previously been targeted by criminals. Since then, we have seen a significant drop-off in terms of successful thefts of those models. Also we are able to supply and fit a VPP (Vehicle Protection Plate) to targeted RX models We endeavour to make available another solution that can offer enhanced protection. Details will follow in the coming weeks. This will be communicated to the Lexus Centre network, which will also be responsible for fitting the enhanced security solution. Why is there no recall for vehicles susceptible to the CAN bus attack? Recall announcements in the UK are guided by very specific guidelines as drawn up by Driver and Vehicle Standards Agency (DVSA). To qualify as a recall, the issue must relate to a safety or thermal type issue where there is potential for injury as a result of vehicle manufacture or component failure. Only in these such circumstances can a recall be announced. In recall circumstances, the DVSA will provide manufacturers access to ownership records for purpose of communication. Instances of theft do not trigger a recall. Will Lexus pay for damage caused by an attempted theft? No. This will need to be addressed by the customer and the vehicle insurers. While we understand theft or attempted theft can be highly upsetting and, in some cases, a costly experience, in such instances customers are first and foremost victims of crime. Lexus does not cover costs associated with criminal activity either under the terms of the warranty or as goodwill. What is the position with insuring affected models? As a manufacturer, we stay close to Lexus Insurance colleagues and indeed all motor insurers. We are aware that in many cases, insurance premiums might have increased as a direct result of vehicle crime. We need to refer you to your insurer for further comment. https://mag.lexus.co.uk/lexus-uk-statement-on-vehicle-theft

Thanks for all the helpful info, much appreciated!

where possible I would park your vehicle with that front left wheel close up against a wall or other obstacle until Lexus have announced their security update program, expected to be towards the end of April. Until many vehicles have been updated I'd delay fitting a new trim piece as it could just get ripped off again by another theft attempt.

Hi There are plenty of Lexus UX spares (including full cars breaking) on eBay. Personally I would contact some of them and request a price for the trim. You should be able to replace the part yourself with basic tools and knowledge.

Amen to that brother!

I've been looking into this, I believe the Lexus list of affected models is correct and therefore the RC F isn't vulnerable - it is different to the RC. Whilst it does have CAN bus connected headlights, they are on a different CAN bus from the Smart Key/Certification ECU and therefore you cannot inject signals to fool it into thinking the key has unlocked the vehicle. Some initial thinking was there was a vulnerability on either the body ECU or gateway ECU which is allowing communication between two buses but all the listed affected vehicles have the headlight ECU directly connected to the same bus as the vehicle's Smart Key/Certification ECU which then unlocks the doors and communicates with the security ECU to turn off the alarm. Certainly this is the case up to MY18 models, I've not seen diagrams for MY19 onwards yet but I doubt it was changed.

When they arrive - PICS!! (pretty please with cream on top). I'd imagine the last of the line (in Europe at least) will be collectable one day. Congrats!

......I only hope the "developers" of the Link App are kept away from this project.

They've been after ours for a while, but the CT is by far the most bullet proof car we have owned. Ours is now back to looking as new and maintained regardless of cost. Unfortunately for the dealer the bulk of his offerings although newer, look no better and most have higher mileage, and would mean me parting with a decent wedge for basically a newer reg plate, and as I have a private plate to put on it at some stage it seems a no brainer for me. Of course things could change today as it's in for Service and MOT 😆

Lexus canbus theft issue featured on one show and watchdog, resulting in a statement from Lexus and promise of a security upgrade… along with confirmation of models affected (including ES)

My LBX has an April Build Slot & a June Delivery. Demand must be excellent as you still cannot Build your Car , Fit Factory Options & you Pay a refundable £500. . Tel

Had a free-ish weekend so spent a few hours fitting some new rear discs/pads and wheels to the Lexus. I picked up some Tesla Model 3 wheels with 4 almost new Michelin Pilot sport 5's on for a steal, I quite like the design of them without the standard wheel covers, fitted the style I was after on this car. The tyres are 235/45/18's slightly bigger than I'd have wanted, but couldn't pass up on the deal. The ET on the wheels are slightly better than standard, the rear may benefit from 20mm spacer to get them perfectly in the arch, but for now I feel they look far better! Reason for doing the rear discs was after a trip up to my brothers I noticed the rear left was very hot, thought it must be the slider pins. Turns out the slider pin that usually causes issues was perfectly fine, fortunately someone has definitely looked after the car in the past. I left the bottom pin in place, cleaned and applied plenty of new grease, the top slider on both sides I replaced with a new pin and boot. The left caliper piston had been pretty tough to push back in, I attempted to free it up as much as possible without actually taking it out, after a short trip with the new set up I noticed the disc still get very hot, so the piston's definitely sticking. New rear caliper is on its way, gives me a reason to change out to rear lines for a braided set I got with the car and to get some new fluid in the lines, hoping to have that sorted this weekend. Fair to say the old discs had served their time 😄 The next issue to sort with be a CEL I've sporadically had since owning the car. Of recent its been a P0420, but has also been a P0137 both for Bank 1, sensor 2. After doing a bit of research it could well be a leak prior to or around the downstream sensor and my mid pipe to cat exhaust flange isn't looking great at all, for how well preserved the underside of the car is, the exhaust flanges have taken a beating haha. Thinking it may need to go to an exhaust shop to get them to cut and weld on 2 new flanges and the cheaper option, or I get a custom mid pipe made at the same time. That being said the cars driving well with the new alloys/tyres on, it's already eliminated a pulling to the right I had with the old alloys. Still going strong at 157,000 miles!

Premium + sonic gray + ammonite sand

Try Lexus insurance. I got a good price quote earlier today.

@morgan_sa hey dude, just buy one of the Android units from AliExpress.. They all seem to be running off the same platform anyway. Mine worked fine in the green car and I paid £150.. 2G32GB. I am going to buy another one for my new IS250, however this time I'll go for the 4G64GB which is 8 core just to future proof it a bit 🙂 It's ~£190 - www.aliexpress.com/item/1005005534168076.html Also the one i sent is a bit more OEM looking, I had the 10.1" one without the side buttons before and it's way too big in my opinion. Looks a bit out of place in this car. What plans you got for the car this year? I will not be going to shedfest, but I am going to RollHard, Players Goodwood, Plus44 & Ultimate Stance. Depending on how my show & shine application goes.

All Lexus vehicles in the last 20 years have multiple CAN buses. The issue is specifically CAN bus enabled headlights which allows easy access to the wiring when the vehicle is locked because inner wings don't really existing these days, just plastic wheel arch liners. All NXs (although pre-facelift may be more difficult to access the wiring - facelift models for definite) and all RX series IV (2016-2022) are vulnerable.

The Teyes does have android auto and the other one if memory serves. I was going to get one this year for mine but not to be unfortunately 😞

Bob, well it could be worse. At least second hand prices have remained stable for the last 2 weeks. Mine is still worth 40k after 9 months!. That's if you could find somebody to take it off you. My dealers says they are reluctant to take any RZ's in px at the moment. That's confidence for you.

To bring far more woe to Lexus - The Sunday Telegraph now has the What car analysis with Lexus having the bottom 2 places for range loss in cold weather -

Went to view the car and very disappointed. All four wheels were badly kerbed and the interior looked very unclean and worn. For 30,000 euro I was expecting a lot more. It just didn't look like a car that was well looked after. Pity because they rarely come up for sale here,