This summer, security researchers exposed a problem hiding in millions of cars that most owners never knew they had. If you bought a used Ford, Toyota, Honda, Mazda, or Jeep—especially one that came from out of state—it is worth five minutes to check whether yours is one of them.
What happened
Computer scientists at the University of California San Diego found that at least 2.2 million cars on the road are vulnerable to an attack that allows thieves within Bluetooth range to lock and unlock doors and immobilize vehicle engines remotely. The problem is not the factory vehicle system itself. It is an aftermarket alarm that dealers add before the sale. KARR and SWDS devices have been installed by dealerships since 2017.
The root cause is straightforward: affected KARR and SWDS devices rely on the same authentication key. Once researchers extracted that key, they could communicate with other vulnerable devices. The researchers did not report that the flaw could start an engine or shut down a vehicle that was already running, but they warned that unlocking a vehicle significantly lowers the barrier to theft. KARR says only a small percentage of devices containing certain Bluetooth-related components are affected.
Why this matters in Chicago
Most vulnerable vehicles were originally bought at Honda, Toyota, Mazda, Ford, and Jeep dealerships in Southern California, but they did not stay there. Vehicles move around the country through used-car sales, auctions, and dealership trades. Chicago’s used-car market includes vehicles that originated in other states.
You also cannot assume you are safe because you declined the dealer’s alarm package. The devices may remain installed and active even when a buyer declines the service, meaning an owner without an active KARR or SWDS contract may still be at risk. Researchers estimate that around half of affected owners do not know the system is installed.
That is a real concern right now. Chicago police are currently warning about a car-theft pattern targeting locked vehicles in paid parking lots and garages across the Loop, with eleven vehicles stolen since August 28, 2026. A Chicago Crime Chaser report documents all eleven incidents and their locations.
How to check your car
- Look at the driver-side window. Many vulnerable cars display a sticker with the word “KARR” or “SWDS.” Not every affected car has one, so continue checking even if you do not see a sticker.
- Call the selling dealer. Ask the dealer to check your VIN and confirm whether it installed a KARR, SWDS, or S.W.A.T. system.
- Use the KARR app or support line. If the dealer cannot provide a clear answer, contact KARR support or connect through the official app.
- Install the firmware update. Acrisure released an update on July 20, 2026. Researchers recommend installing it through the KARR mobile app. Physically removing the hardware may require substantial dashboard disassembly and reconnection of wiring tied to the vehicle’s ignition system.
Where Chicago Car Keys comes in
The firmware update is between the vehicle owner and KARR. But if your car was entered, or you have lost track of a key or fob, Chicago Car Keys can help with lost or stolen car keys. Someone who entered the vehicle may have gained access to a spare key kept in the glovebox or center console. In that situation, the safer response may be to program replacement keys and remove missing keys from the vehicle’s authorized key memory so an old fob can no longer start the vehicle.
Chicago Car Keys is a mobile, automotive-only locksmith. We come to the vehicle at a home, workplace, roadside location, or parking garage throughout Chicago and nearby Cook County suburbs. We cut and program compatible bladed, transponder, smart, and proximity keys, including supported all-keys-lost situations.
Two of the most common vehicle groups connected to this story are also Chicago Car Keys specialties:
- Ford Transit and Transit Connect key cutting and programming (2010–2026)
- Toyota and Lexus key replacement and smart-key programming
- Subaru key replacement and programming (2010–2026)
Extra protection that costs almost nothing
For keyless vehicles, another everyday concern is the relay attack, in which thieves extend a key fob’s signal from inside a home. One simple precaution is to store keys in a properly tested Faraday pouch when you are home, particularly when the vehicle is parked outside. A visible steering-wheel lock can provide another inexpensive deterrent.
Need new keys or want missing keys removed?
Call Chicago Car Keys at 773-521-7000. We provide 24/7 mobile automotive locksmith service, subject to technician, vehicle, parts, location, and procedure compatibility.