Canadian Drivers Sue Auto Giants Over Keyless Entry Theft Vulnerabilities

Imagine locking your car with your key fob, only to find it vanished hours later. This nightmare became reality for André Lacroix when his secured 2018 Toyota Highlander disappeared from his daughter’s driveway in 2022. His frustration fuels a massive class-action lawsuit now authorized to proceed in Quebec, Canada, targeting 13 major automakers over alleged keyless entry theft vulnerabilities they failed to warn consumers about.

The lawsuit claims manufacturers including Toyota, Honda, Hyundai, Nissan, Mazda, Ford, FCA (Stellantis), Audi, Kia, Mitsubishi, Subaru, Volkswagen, and Volvo knew about critical security flaws in their keyless entry and remote start systems for years but neglected to inform buyers or provide adequate fixes. It seeks compensation for thousands of Quebec residents whose vehicles were stolen since May 2, 2021, alleging negligence that made thefts “shockingly easy.”

The Core Allegations: Knowledge and Neglect

Lawyers representing the class argue that the automakers were acutely aware of the widespread keyless entry theft technique known as “relay attacks.” Thieves use inexpensive relay devices to amplify the signal from a key fob inside a home to unlock and start a vehicle nearby. Despite this known risk, the lawsuit contends owner’s manuals provided “absolutely no warning regarding the security of the smart keys.”

“The manufacturers have known about these flaws for several years, but despite the risks for consumers, it appears they haven’t modified their vehicles’ security measures,” state court documents cited by CBC News in August 2025. This alleged failure to act or warn, the plaintiffs argue, directly contributed to soaring vehicle theft rates, particularly during the pandemic years.

A Personal Story Drives Legal Action

André Lacroix, the lead plaintiff, embodies the consumer frustration driving the lawsuit. “It was frustrating,” Lacroix told CBC. “I had the impression that I wasn’t protected by the manufacturer.” His experience highlights the disconnect between consumer expectation of security and the alleged technological vulnerability inherent in many modern keyless systems.

The suit seeks $1,500 in compensation for each class member whose vehicle was stolen on or after May 2, 2021. It also demands an additional $1,500 per vehicle sold or leased between May 2021 and May 2024, with that sum directed to a non-profit focused on car owner consumer protection. Crucially, it pushes automakers to formally acknowledge the alleged design flaw and their failure to warn consumers.

Theft Trends and Manufacturer Responsibility

While the Insurance Bureau of Canada reports vehicle theft remains a major concern in Ontario and Quebec, national figures showed a promising 19% decrease in the first half of 2025 compared to 2024. However, the lawsuit argues this doesn’t absolve manufacturers of their responsibility for the security of the technology they implement.

The case hinges on proving that automakers possessed the knowledge and capability to mitigate the keyless entry theft risk – through software updates, improved encryption, or clearer warnings – but chose not to, prioritizing cost or convenience over consumer security. The manufacturers named in the lawsuit have yet to issue detailed public responses to the specific allegations as the case moves forward.

This landmark lawsuit spotlights the critical intersection of automotive technology and consumer protection. If successful, it could force fundamental changes in how carmakers design, communicate, and update vehicle security systems, potentially impacting millions of drivers globally and holding the industry accountable for safeguarding against increasingly sophisticated keyless entry theft tactics. Vehicle owners are urged to employ physical deterrents like steering wheel locks and store key fobs in signal-blocking Faraday pouches until more robust solutions become standard.

Must Know

Q: What is a “relay attack” in keyless entry theft?
A: A relay attack involves thieves using two small electronic devices. One device captures the signal from your key fob inside your home, relays it to a second device near your car, tricking the vehicle into thinking the key is present, allowing unlock and start. It exploits the inherent design of passive keyless entry systems.

Q: Which car brands are specifically named in the Canadian class action?
A: The lawsuit authorized by the court targets Toyota, Honda, Hyundai, Nissan, Mazda, Ford, FCA (Stellantis), Audi, Kia, Mitsubishi, Subaru, Volkswagen, and Volvo. Attempts to include Porsche, Jaguar Land Rover, Mercedes-Benz, and BMW were denied by the judge.

Q: What compensation are the plaintiffs seeking?
A: The lawsuit seeks $1,500 for each class member (Quebec resident) whose vehicle with keyless entry/start was stolen on or after May 2, 2021. It also seeks an additional $1,500 per vehicle sold/leased in Quebec between May 2021 and May 2024, to be paid to a consumer protection non-profit.

Q: What is the main argument against the automakers?
A: The core allegation is negligence. Plaintiffs argue the automakers knew about the vulnerability of their keyless systems to relay attacks for years but failed to adequately warn consumers in manuals or provide security updates/retrofits, making thefts easier and contributing to financial loss and distress.

Q: Are newer cars immune to this keyless entry theft method?
A: While some newer models feature improved encryption (like Ultra-Wide Band technology or motion-sensing fobs), many vehicles on the road today, including recent models, remain vulnerable to relay attacks. Consumers should verify their specific vehicle’s security features and take precautions.

Q: How can I protect my keyless entry vehicle from theft?
A: Use physical deterrents (steering wheel lock), store key fobs in a Faraday pouch or box (blocking signals), keep fobs away from doors/windows, consider an aftermarket security system with an immobilizer, and check if your manufacturer offers any security software updates.