Your Vehicle May Be Hackable

It’s no surprise that in our increasingly technological society, more and more vehicles are being equipped with in-car Wi-Fi and state-of-the-art infotainment systems. While purchasing a new vehicle with all of the latest luxury upgrades is appealing, it’s important to also consider the security risks that may leave your automobile vulnerable to cyberattacks.

Auto manufacturers have begun to address the growing concern of vehicle-hacking – one example is the massive voluntary recall that Fiat-Chrysler announced in July 2015, which involved 1.4 million cars with radio security flaws. Vehicle owners received a USB device containing a software update as a precautionary measure to enhance security.

The Fiat-Chrysler recall was prompted by a demonstration in which hackers were able to remotely control a Jeep Cherokee, taking over the vehicle’s air-conditioning, windshield wipers, horn and stereo before turning off the engine. All of this was possible through exploitation of the vehicle’s wireless infotainment system.

Just how vulnerable are these connected automobiles? A 15-year-old attending the 2015 Battelle CyberAuto Challenge held in Troy, Michigan was able to hack into a vehicle and remotely unlock and start the car. The boy spent $15 on parts at a Radio Shack and assembled the device within a night, surprising security experts in attendance.

The National Highway Traffic Safety Administration (NHTSA) and Federal Bureau of Investigation (FBI) issued a public service announcement to consumers in March 2016, warning automobile owners with internet-connected vehicles that they’re at risk of being hacked. And the FBI has also addressed concerns surrounding vehicle connectivity, outlining security measures that owners should take to better protect themselves from cyberattacks.

While there are a number of things drivers can do to secure their vehicles against hackers, one of the best defenses is to keep your software updated. Vehicle operations in today’s cars are computer-based and are susceptible to viruses, just as laptops and PCs are.

If you have Windows installed on your computer, you’re probably familiar with automatic updates. Connected vehicles require updates to ensure security to defend against cyberattacks. So, what are automobile manufacturers doing to make sure that drivers are secure? They’re issuing software update notifications and recall notices.

Remember to always verify the authenticity of the notification with the manufacturer. If your notification included a link, don’t click on it because it might not be secure. Instead, use a USB or SD card to download and install the software from the manufacturer’s website. Another option is to make an appointment at your dealership for installation of recall software or updates.

In-car technology will undoubtedly continue to evolve, providing consumers with a wealth of helpful functions and options, but it will also bring with it risks that were once only found in sci-fi movies. Remember to stay informed and take the proper precautions to protect your vehicle.

Mercury Insurance has developed an interactive infographic to help drivers determine if their vehicle is vulnerable to cyberattacks.

Stephanie Behnke

Mercury Insurance