Hacker compromises Subaru, exposing data leakage risks

Total digitalization of the automotive industry has its benefits, but can backfire if the security isn’t tight enough. Volkswagen and Kia learned this lesson some time ago, while Subaru has stayed oblivious until now.

Sam Curry, a cybersecurity professional, has managed to hack the automaker’s Starlink system via a vulnerability on the official Subaru website. By exploiting this vulnerability, he managed to gain access to personal data of Subaru car owners, including their full names, addresses and other sensitive information. He even managed to unlock doors on some cars remotely.

The company has quickly reacted and patched this hole in its website, so the situation seems to be resolved for now.