Ethical Hackers Reveal Subaru Security Leak

Another automaker is at the center of a data security leak, this time Subaru. Some ethical hackers, guys who hack into things to warn companies instead of stealing data, were able to gain access to Subaru’s Starlink system, gaining access to all cars and customer accounts throughout the US, Canada, and Japan.

The FTC has moved to stop GM from sharing private driver data with anyone else.

Those hackers found they could have remotely fired up any Subaru’s engine or switched it off, reports Techzine. That’s concerning since to an extent they could take over someone’s vehicle, possibly causing serious problems. Imagine if they had started someone’s garaged Subaru in the middle of the night and just left it running?

They also could actuate the locks and find the real time location. Plus, the security leak allowed the hackers to access customer data like payment information, car access codes, customer service and sale history, etc.

Connected cars offer all kinds of advantages, allowing us to better communicate on the go and access key information when we’re not right next to the vehicle. However, security leaks like this provide an opportunity for dishonest hackers to spread chaos or sell your private information.

Thankfully, the hackers notified Subaru of the security vulnerability and the automaker patched it within 24 hours. We don’t know if any unethical hackers gained access before then, but even if they didn’t it’s a troubling revelation.

After all, data security has become a hot topic both inside and outside the auto industry. With cars collecting all kinds of information about your habits, a hacker could learn far too much about you as a person.

Even worse are the cases where automakers have been found selling private driver data to insurance companies and other third parties. This has reportedly led to insurance premium hikes for some people and could cause other long-term problems.

Image via Subaru USA