When Your Used Car is a Little Too ‘Mobile’
Summary: Mathew Marulla turned in his leased Ford Focus electric vehicle to Ford in 2016, but his old MyFordMobile.com credentials still worked years later, showing the car's current location and mileage and letting him remotely start it and lock or unlock its doors. Ford said dealerships are supposed to perform a master reset through the SYNC infotainment screen before resale to disassociate the vehicle from prior accounts, but no such reset removed Marulla's access.
What's compelling: A previous owner retained remote control and location tracking of a car he had not owned for four years, and the article notes the same de-provisioning gap extends to other resold smart devices, including some security cameras.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026