Car theft used to be a simple story: a smashed window, a peeled steering column, and a criminal with the mechanical finesse of a raccoon in a trash can. Today, thieves are still smashing windows… but now they might also bring a laptop, a signal booster, or a “plug-and-play” gadget that talks to your car better than your cousin who “knows cars” because he once changed his own wiper blades.
The good news? In the U.S., theft totals have been trending downward lately after peaking earlier in the decade. The National Insurance Crime Bureau (NICB) reported vehicle thefts fell about 17% from 2023 to 2024, dropping below one million for the first time since 2021. (National Insurance Crime Bureau) And NICB says that decline continued through the first half of 2025, putting the country on track for a second straight year of improvement if trends hold. (National Insurance Crime Bureau)
But here’s the twist: even as totals cool off, the methods are getting hotter—and that’s forcing carmakers, lawmakers, insurers, and drivers to rethink what “anti-theft” even means.
The Big Picture: Theft Is Down, But the Game Has Changed
If you only look at the top-line numbers, you might think, “Sweet—problem solved.” Not quite. Theft is becoming more targeted, more tech-driven, and more “business-like.” Think less joyride, more supply chain.
A major reason theft surged in the early 2020s was a very specific vulnerability: certain Hyundai and Kia models without engine immobilizers became absurdly easy to steal, and social media poured gasoline on the fire. NICB’s 2023 report noted Kia and Hyundai theft rates jumped so high they disrupted the long-running pattern of full-size pickups dominating the “most stolen” conversation. (National Insurance Crime Bureau)
Then the response started rolling in. Hyundai and Kia rolled out theft-deterrent software updates for millions of vehicles, backed by NHTSA announcements. (NHTSA) And insurance research has since shown thefts of Hyundai and Kia vehicles have been falling following those upgrades. (IIHS Crash Testing)
Still, this story didn’t end with a software patch. In mid-December 2025, Reuters reported Hyundai and Kia agreed to retrofit over 4 million U.S. vehicles with additional anti-theft equipment, and to ensure future U.S. models include immobilizer technology. (Reuters) AP also reported on the nationwide settlement framework and the scale of repairs involved. (AP News)
Why Modern Cars Can Be Easier to Steal (Yes, Really)
You’d think a car packed with computers would be harder to steal than a 1998 sedan with the security system of a houseplant. Sometimes it is. But modern convenience features create modern attack surfaces.
Keyless Entry: Convenience With a Side of Risk
Keyless entry and push-button start are awesome—until someone convinces your car that your key fob is standing right next to it when it’s actually chilling inside your house on the kitchen counter.
That trick is called a relay attack. Researchers and security literature regularly describe how attackers can “relay” the signal between the car and key, effectively extending the key’s presence. (PMC) It’s not sci-fi, it’s more like “low-budget heist movie,” except the props are getting cheaper and the criminals don’t even need to break glass.
Governments have noticed. In the UK, the Home Office announced plans to ban possession or distribution of electronic devices used for vehicle theft (including those used to exploit keyless systems), with penalties that can reach up to five years in prison. (GOV.UK)
The New “Slim Jim”: Your Car’s Digital Plumbing
Some theft methods don’t bother with the key signal at all. Instead, criminals target the car’s internal communications—basically, the nervous system that lets modules talk to each other.
One technique that’s gotten attention in security circles is CAN injection, where thieves exploit weaknesses to send messages on the vehicle network that can help unlock or start a car. Security reporting has documented researchers analyzing real-world thefts that used CAN injection methods. (SecurityWeek) A well-known automotive security specialist also laid out how thieves often avoid “breaking the crypto” and instead work around it by abusing weaker links in the system. (kentindell.github.io)
This is why you’ll hear modern car theft described less as “hotwiring” and more as “unauthorized system integration.”
How Theft Trends Are Forcing Automakers to Rethink Security
Car safety used to mean crash safety. Now it also means “can someone steal your car in 90 seconds without leaving fingerprints?”
Immobilizers Are Becoming Table Stakes Again
Immobilizers aren’t new. But the Hyundai/Kia theft crisis reminded everyone what happens when a basic security feature isn’t consistently included. Regulators and settlements have pushed hard for broader coverage, and recent agreements emphasize immobilizers for future vehicles plus retrofits for older ones. (Reuters)
Software Updates Are Part of the Security Toolkit
NHTSA highlighted how Hyundai and Kia theft-deterrent software updates changed alarm logic and required the key to be present to start the vehicle on certain models. (NHTSA) That’s a big shift: security isn’t only hardware anymore. It’s patches, campaigns, and ongoing upgrades—more like smartphones than old-school cars.
Insurance Data Is Now a Design Feedback Loop
When theft patterns change, insurers notice fast—because they’re literally paying for it. The Highway Loss Data Institute (HLDI), part of IIHS, has published theft-related research showing extremely high theft risk for certain performance models, and also notes the decline in Hyundai/Kia thefts after upgrades. (IIHS Crash Testing) Automakers may not love insurance headlines, but they do respond when risk becomes measurable and public.
What This Means for Regular Drivers and Car Enthusiasts
Here’s the practical reality: you don’t need to panic, but you do need to update your mental model of “car security.”
If you drive a car affected by the Hyundai/Kia theft wave, the modern best practice is simple: check for eligibility and get the manufacturer’s security updates or retrofits when offered. NHTSA’s public campaign info around the software upgrades shows how large-scale these efforts became. (NHTSA) And the late-2025 settlement reporting suggests more hardware protections are being rolled out beyond software alone. (Reuters)
If you drive a keyless vehicle, treat your key fob like a tiny radio transmitter—because it is. Relay attacks thrive on predictable habits, like leaving keys near the front door. The UK’s push to ban theft devices is basically a government way of saying, “Yeah, this is a real thing.” (GOV.UK)
And if you’re a car enthusiast, this trend should feel familiar. Cars have always been an arms race: horsepower, braking, aerodynamics… now cybersecurity is joining the chat. Today’s bragging rights aren’t just 0–60. They’re also “0–gone.”
The Road Ahead: Security Is Becoming a Feature You’ll Shop For
Theft totals may be improving overall in the U.S., but the direction of travel is clear: theft is getting smarter, and defenses have to match.
Expect more of these shifts in the coming years:
Security ratings and anti-theft tech will become more prominent in marketing, not just buried in fine print. Over-the-air updates will increasingly include security fixes, not just infotainment tweaks. Laws will keep targeting the tools of high-tech theft, as seen in the UK’s crackdown approach. (GOV.UK) And automakers will keep learning the hard way that “saving a few bucks per car” can turn into “spending hundreds of millions later,” which recent reporting strongly suggests in the Hyundai/Kia retrofits story. (Reuters)
Car theft isn’t going away. But the era of treating it like a simple lock-and-key problem? That’s already in the rearview mirror.
