How Hyundai Is Fixing the Kia Boys Theft Vulnerability For Free
The fix band-aids an immobilizer on affected key-started Hyundais.
The infamous Kia Boys thefts publicized on TikTok and other social media channels that plagued some Hyundai and Kia vehicles turned into a shocking black eye for the Korean manufacturer, exposing an embarrassing security flaw. The first—and albeit temporary—fix to better fortify vulnerable car models involved steering wheel locks, but those were not only easily defeat-able but were also easily opened with a low-skill lock pick attack. Even the fix was flawed.
0:00 / 0:00
Fortunately, Hyundai has been working on a permanent and free fix for affected vehicles with physical keys and traditional ignition tumblers, and the solution makes it impossible for scofflaws to drive your car away using the methods shown on TikTok.
Why The Kia Boys Thefts Work
The major problem with vulnerable Hyundai and Kia models isn't just that the ignition's lock cylinder is easily removable, or that a male USB end is the correct shape to turn the switch in the steering column. The main issue is that the car starts at all when this happens—because it lacks an immobilizer that prevents either the engine ignition and fuel pump or starter from activating without a special key.
The reason you don't hear about similar issues outside the U.S. is because, despite the mundane requirements governed by the Federal Motor Vehicle Safety Standards, immobilizers aren't required by law like they are in countries like Canada, Germany, the UK, and Australia.
How Do Most Immobilizers Work?
Since the 1980s, OEMs have integrated a signaling method into the ignition lock cylinder and key—though the idea was patented as early as 1919. While you could pick, yank out, or copy the key for the ignition cylinder, without the correct signla, the vehicle couldn't start.
The earliest forms of vehicle antitheft systems used a resistor made into the key and the ECU would be programmed to recognize that resistance and let it know that the proper key was being used. Today, we see this as either RFID or some sort of other short-range broadcasting signal like Bluetooth. Both forms of short-range radio also use a security protocol that changes the code the vehicle looks for and the fob or device transmits each time you start the vehicle or lock the doors.
How The Free Software Fix By Hyundai Works
While Hyundai is offering an immobilizer kit that includes a pushbutton starter for $170, there is a free fix that doesn't require installing anything but software. You'll need to visit your Hyundai dealer or one of the pop-up mobile service events like those in Washington D.C. or St. Louis County, Missouri. While limited to those two areas now, Hyundai is working to expand mobile service events for the fix across the U.S. and you can track that at Hyundai's antitheft site. The site also allows you to check your VIN to see if your Hyundai is one of the affected by the vulnerability, but just know if your car came with a pushbutton starter from the factory, it's not affected, as it has an immobilizer built in.
The fix software updates certain vehicle control modules—as described by Hyundai—to immobilize the vehicle using the lock button on your key fob. Once you press that, the car will no longer be able to start until you push the unlock button to deactivate the "ignition kill" feature. Once programmed, Hyundai and its dealers will provide a decal to show that the immobilizer software has been installed. Honestly, it's a very smart yet simple way to integrate an immobilizer without major modification to the vehicle or keys.
What Hyundais Have A Fix Ready?
The only bad news is that not all Hyundais that use a key to start have the free software update ready at this time. For those vehicles, Hyundai is offering a reimbursement of a steering wheel lock for the lack of a software solution to those vehicles. For vehicles that can be programmed, there will be more mobile clinics in New York City (October 28 to 29); Chicago (November 3 to 5); Minneapolis, Minnesota (November 10 to 11); Saint Paul, Minnesota (November 12 to 13); and Rochester, New York (November 17 to 18). There will be more single day mobile clinics held by local Hyundai dealers before the end of 2023.
Currently, the following are confirmed to have a software fix, otherwise you'll have to use a steering wheel lock or opt for the $170 starter button immobilizer kit and have it installed by your dealer if you need or want it right away.
Having experience in many forms of the automotive industry, Justin Banner has done more than just write about cars. For more than 15 years, he's had experience working as an automotive service technician—including a stint as a Virginia State Inspector—service advisor, parts sales, and aftermarket parts technical advisor (a fancy way of saying he helped you on the phone when you had trouble fitting your brakes over your aftermarket wheels and the like). Prior to his tenure as a full-time editor, Justin worked as a freelance writer and photographer for various publications and as an automotive content creator on YouTube. He’s also covered multiple forms of motorsports ranging from Formula Drift, drag racing, and time attack, to NASCAR, short course off-roading, and open desert racing. He's best known for breaking down complex technical concepts so a layperson can more easily understand why technologies, repairs, and parts should matter to them. At MotorTrend, Justin is part of the news team covering breaking news and topics while also working as a judge for MotorTrend Of the Year events and other major comparison tests.
Read More