A viral TikTok trick sent Hyundai and Kia thefts soaring, and these cars are still the easiest to steal

A single social-media trend turned an obscure engineering shortcut into one of the most consequential car-theft waves in recent memory. Videos circulating on TikTok and other platforms showed how certain Hyundai and Kia models could be started with little more than a screwdriver and a USB cable, and thefts of those vehicles exploded across American cities. Years later, even after a software fix, the affected models remain among the easiest cars on the road to steal, and the episode stands as a case study in how a hidden design gap can become a public-safety crisis.

How the Kia Challenge exploited a missing part

The vulnerability at the center of the trend was the absence of an electronic immobilizer, a standard anti-theft component that prevents an engine from starting without the correct key signal. Many turn-key Hyundai models from about 2015 to 2021 and Kia models from about 2011 to 2021 were sold in the United States without one, which meant a thief who could reach the steering column could bypass the ignition by hand. The so-called Kia Challenge spread instructions for doing exactly that, as documented in accounts of the viral theft phenomenon and the loosely organized groups behind it. Thefts of the exposed models surged, in some jurisdictions by an order of magnitude, and the resulting joyrides were tied to crashes, injuries, and deaths well beyond the property loss of the stolen cars themselves.

What made the gap so damaging was its scale. The missing immobilizer was not confined to one model year or trim but spread across millions of popular, affordable vehicles that were common on residential streets and in the hands of younger and lower-income drivers, precisely the population least able to absorb the cost of a stolen or wrecked car.

The software fix and how much it helped

Beginning in February 2023, Hyundai and Kia launched a free software upgrade delivered as a service campaign, eventually covering millions of vehicles across roughly two dozen affected models. The update changes how the ignition behaves so that the car cannot be started the way the viral videos demonstrated, provided the owner locks the vehicle with the key fob. Analysis by the Highway Loss Data Institute found the fix made a real difference: theft claim frequency for upgraded vehicles fell substantially compared with those that had not received it, and the drop in whole-vehicle thefts was even larger, as detailed in the institute’s bulletin on the upgrade’s effect on theft claims.

Those reductions, on the order of nearly half for overall theft claims and roughly two-thirds for full vehicle thefts, showed that the immobilizer gap really was the driving factor. Where the software went in and was used as intended, the wave receded.

Why the models are still stolen

The catch is that the fix does not protect every owner automatically. The upgraded software’s immobilizer function only engages when the driver locks the car with the fob, so a vehicle left unlocked, or one whose owner never brought it in for the update, stays vulnerable. Many eligible cars have not been serviced, and the older design cannot simply be forced on drivers who do not respond to recall-style outreach. As a result, theft rates for these vehicles remain elevated well above comparable models, a persistence the Insurance Institute for Highway Safety has highlighted in its reporting on how the anti-theft software tamped down, but did not end, the trend.

There has also been a side effect. Vandalism claims rose for some upgraded vehicles, a pattern investigators attribute to failed break-in attempts, where a would-be thief damages the car trying the old method before discovering it no longer works. In other words, the trend left a mark on the vehicles even where it stopped succeeding.

Lawsuits, settlements, and steering-wheel locks

The fallout reached well beyond individual owners. Cities that saw their theft numbers spike pressed the automakers to act, insurers in some areas grew reluctant to write policies on the affected models, and Hyundai and Kia faced a wave of litigation, including class-action claims and actions brought by state attorneys general over how they handled the known vulnerability. The companies responded with the software campaign, distributed free steering-wheel locks through police departments, and agreed to settlements resolving many of the claims.

For prospective used-car buyers, the practical lesson endures. The affected Hyundai and Kia model years remain a higher theft risk than their peers, the protection depends on both the software update and consistent use of the fob to lock the car, and physical deterrents such as a steering-wheel lock still matter. A design omission that once seemed trivial became, through the amplifying power of a viral video, a lasting liability that owners of these vehicles continue to manage today.

This article was produced with AI assistance and reviewed by the Morning Overview editorial team.

More from Morning Overview