The Shocking Discovery That Exposed Millions of Drivers

Imagine this: a hacker sitting in a dark room, sipping coffee, and casually unlocking your car, starting the engine, and tracking your every move. Sounds like a scene from a Hollywood thriller, right? Wrong. This is real life. A year ago, two cybersecurity warriors, Sam Curry and Shubham Shah, uncovered a chilling vulnerability in Subaru’s web portal that allowed them to do just that. And guess what? This isn’t just a Subaru problem—it’s an industry-wide ticking time bomb.

How They Did It: The Anatomy of a Car Hack

Curry and Shah didn’t need to be near the car to pull this off. They exploited a web portal designed for Subaru employees, turning it into a hacker’s playground. Here’s what they could do:

• Remotely unlock and start the car – No keys? No problem.
• Track the vehicle’s location in real-time – Every turn, every stop, every detour.
• Access a year’s worth of location data – Your entire driving history, laid bare.

“Whether somebody’s cheating on their wife, getting an abortion, or part of a political group, there are a million scenarios where you could weaponize this against someone,” Curry told Wired. The implications are terrifying.

“This isn’t just about cars—it’s about privacy, safety, and trust. And right now, the auto industry is failing on all fronts.”

Sam Curry, Cybersecurity Researcher

The Bigger Picture: A Band-Aid on a Bullet Wound

Subaru acted fast, patching the vulnerabilities after the researchers sounded the alarm. But here’s the kicker: this isn’t just a Subaru issue. The same web-based flaws plague other major carmakers, including Acura, Genesis, Honda, Hyundai, Infiniti, Kia, and Toyota. The problem? As long as employees have access to sensitive data, hackers will find a way to exploit it. And with hacking methods evolving faster than ever, the auto industry is playing a dangerous game of catch-up.

What This Means for You

Your car isn’t just a car anymore—it’s a connected device, and that makes it a target. Here’s what you need to know:

• Your data is vulnerable. From location history to personal habits, hackers can weaponize it in countless ways.
• This is an industry-wide issue. If you drive a connected car, you’re at risk—no matter the brand.
• Stay vigilant. Keep your car’s software updated and monitor for unusual activity.

The Bottom Line: Wake Up, Auto Industry

This isn’t just a wake-up call—it’s a five-alarm fire. The auto industry needs to step up its cybersecurity game before it’s too late. Because when it comes to your safety and privacy, “good enough” isn’t good enough. The road ahead is long, but the time to act is now.