A viral hack made two carmakers’ models the most-stolen cars in America

A social-media trend showing how to steal certain Hyundai and Kia vehicles helped overturn America’s usual vehicle-theft rankings. In national data for 2023, the Hyundai Elantra, Hyundai Sonata and Kia Optima occupied the first three positions, displacing the full-size pickups that had long dominated the list. The episode showed how a design vulnerability can become a nationwide crime pattern once a simple method spreads online.

The rankings describe theft counts during a specific year, not the current risk attached to every Hyundai or Kia. The automakers introduced software upgrades and other measures, police agencies changed tactics, and later vehicle designs use different equipment. Still, the 2023 table remains a clear record of the viral method’s extraordinary reach.

Hyundai and Kia took six places in the 2023 top 10

The National Insurance Crime Bureau counted 48,445 thefts of Hyundai Elantras, 42,813 Hyundai Sonatas and 30,204 Kia Optimas during 2023. Its national top-10 list contained six Hyundai or Kia models, with the Kia Soul, Kia Forte and Kia Sportage joining the three leaders. The Chevrolet Silverado 1500, previously a familiar theft leader, ranked fourth.

NICB said social-media trends explaining how to steal the vehicles likely contributed to the brands’ surge. The organization also reported that more than 85 percent of stolen passenger vehicles were eventually recovered, including 34 percent recovered within a day. Recovery, however, does not mean an owner escapes broken windows, damaged steering columns, towing costs or a lengthy loss of transportation.

The exposed ignition design turned theft into a short routine

The technique targeted many vehicles with a traditional key ignition that lacked an engine immobilizer. An immobilizer uses an electronic code from a key or fob before allowing the engine to run. Without that additional check, thieves could remove steering-column trim and manipulate the ignition with a common object after getting inside the vehicle.

The method became closely associated with videos posted by groups calling themselves the Kia Boys. Copycats did not need specialized knowledge or expensive tools, which lowered the barrier to opportunistic theft. Some incidents involved children or teenagers, and stolen vehicles were sometimes used for reckless driving or other crimes rather than kept for resale.

The vulnerability did not affect every vehicle from either manufacturer. Push-button-start models generally used immobilizers, and equipment varied by model year and market. That uneven exposure explains why campaign eligibility depends on a vehicle identification number rather than the brand name alone.

A federal campaign pushed free software and locks

In 2023, the National Highway Traffic Safety Administration announced that Hyundai and Kia had developed theft-deterrent software for millions of affected vehicles. The upgrade was designed to require the key in the ignition to start an enrolled vehicle and to extend the alarm sound. The companies also distributed steering-wheel locks through law-enforcement agencies for some owners whose vehicles could not take the software.

Eligibility varies by model and model year, so a visible badge alone cannot show whether a vehicle is affected or updated. Owners can check a vehicle identification number through the manufacturer’s campaign site or a dealer. A completed upgrade should appear in service records, and the manufacturer may add window decals intended to discourage a thief before damage occurs.

Insurance costs reflected damage beyond successful thefts

The viral trend produced expenses even when a thief failed to drive away. Smashed glass and broken ignition hardware can generate a substantial claim, while repeated incidents in a neighborhood can alter insurers’ loss estimates. Some consumers reported difficulty obtaining new coverage for particular model years or faced sharply higher premiums.

A class-action settlement covering certain owners provided a path for claims tied to theft losses, insurance deductibles and other expenses. The settlement was valued at up to $145 million, though eligibility and available benefits depend on the vehicle and documented loss. That civil process was separate from the manufacturers’ service campaigns.

Layered security still matters after a software update

A steering-wheel lock gives a visible reason to skip a vehicle, while secure parking, good lighting and removing valuables reduce opportunity. An aftermarket alarm or tracking device can add another layer, but installation quality matters because poorly fitted electronics can create reliability problems. Police advice to report a theft immediately is practical: the license plate and vehicle identification number can enter national systems while the trail is fresh.

The larger lesson extends beyond two brands. Online platforms can rapidly convert an obscure weakness into shared criminal knowledge, producing losses faster than recalls, service campaigns or legislation can respond. The 2023 rankings captured that lag in stark numerical form: models from Hyundai and Kia did not merely enter the list; they crowded its top positions after a viral trick made vulnerable vehicles unusually easy targets.

This article was produced with the assistance of AI and reviewed by Morning Overview editors prior to publication.

More from Morning Overview