Owners of certain Hyundai and Kia models who installed the manufacturers’ anti-theft software update are still reporting thefts and break-in attempts, raising questions about how well the fix actually works. A multistate settlement worth $9 million, reached by North Carolina Attorney General Jeff Jackson, explicitly allows owners to file restitution claims for thefts occurring on or after April 29, 2025, even if their vehicles already received the update. That restitution window signals that regulators and the automakers themselves treat post-fix thefts as a foreseeable outcome rather than an anomaly.
Why the software fix has not ended the theft crisis
The core problem is straightforward. Millions of Hyundai and Kia vehicles lacked engine immobilizers, a standard anti-theft feature found in most competing brands. Thieves exploited this gap using a method popularized on social media that required little more than a USB cable and a few seconds. In response, the automakers launched a nationwide service campaign covering millions of vehicles that changed alarm logic and ignition-start requirements through a software update. The fix was designed to make it harder to start the engine without the proper key.
Yet the settlement terms tell a different story about the update’s effectiveness. Both the North Carolina and Washington state attorneys general structured their agreements so that drivers whose vehicles had the software update installed, or were at least scheduled for it, can seek compensation if a theft or attempted theft occurs on or after April 29, 2025. If the update reliably stopped thefts, there would be little reason to build a restitution mechanism around post-update incidents. The legal framework itself treats continued vulnerability as a practical reality for affected owners.
The tension is sharpest for drivers who followed every recommended step. They brought their cars to dealerships, waited for the update, and assumed the problem was solved. For those owners, the existence of a claims process tied to future thefts amounts to an admission that the software alone may not be enough to protect their vehicles. It also shifts expectations: instead of viewing the update as a definitive cure, drivers are being told-implicitly through the settlement-that it is one layer of protection in a still-risky environment.
Settlement terms and restitution eligibility after April 2025
North Carolina Attorney General Jeff Jackson’s office announced the $9 million settlement with Hyundai and Kia to address the wave of thefts tied to the missing immobilizer technology. The agreement covers consumers in participating states and sets April 29, 2025, as the start date for restitution claims involving vehicles that had received the software update or were scheduled for it. That date functions as a dividing line between the earlier phase of the theft crisis and a new period in which the software fix is assumed to be in place for most eligible vehicles.
A parallel settlement announced by Washington state confirms the same eligibility structure. According to the Washington attorney general, the multistate agreement specifically addresses the automakers’ failure to equip vehicles with adequate anti-theft technology and creates a process for owners to seek reimbursement. The restitution provisions in both states mirror each other: if an owner’s updated vehicle is stolen or broken into on or after April 29, 2025, that owner can file a claim under the settlement, subject to whatever documentation and deadlines the claims administrator ultimately sets.
The practical effect for drivers is significant. Owners who experience a theft after the April 2025 date now have a formal path to seek compensation without filing a separate lawsuit. The settlement shifts part of the financial burden back to the manufacturers, acknowledging that the software campaign did not fully close the security gap that made these vehicles easy targets in the first place. For some households, that could mean reimbursement for insurance deductibles, out-of-pocket repair costs, or related expenses that might otherwise be difficult to recover.
At the same time, the fixed settlement amount creates uncertainty. If claims surge after the eligibility date, individual payouts could be limited or delayed. The structure effectively balances two competing messages: Hyundai and Kia accept that thefts may continue, but they also cap their collective financial exposure. Consumers are left to navigate that tension while trying to keep their vehicles safe in the meantime.
Gaps in post-update theft data and what drivers should watch
One major piece of the puzzle is still missing. No publicly available federal dataset or police report aggregate currently tracks how many thefts have occurred specifically after the software update was installed. The National Highway Traffic Safety Administration described the technical changes when it announced the service campaign, but the agency has not released figures showing post-update theft rates compared to pre-update rates. Without that data, it is difficult to measure whether the fix reduced thefts by a meaningful margin or simply made them slightly harder to execute.
The same gap exists on the settlement side. Neither the North Carolina nor Washington state announcements include numbers on how many post-update theft claims have already been submitted or are expected. That absence matters because the scale of future claims will determine whether the $9 million settlement fund is adequate or quickly exhausted. If post-update thefts remain common, the fund could be strained; if they are relatively rare, the settlement may prove more than sufficient.
States with the largest populations of pre-update vehicles still on the road are likely to see the highest volume of restitution filings after April 29, 2025. Urban areas where thefts initially spiked could again become hotspots, especially if thieves continue to target models they recognize as vulnerable. Owners in those states face a dual risk: their vehicles may still be targeted by thieves familiar with the original exploit, and the settlement fund could run thin before all valid claims are processed.
For drivers who own an affected Hyundai or Kia, the first step is confirming whether their vehicle has received the software update. Owners can check with their local dealership or contact the manufacturer directly, using their vehicle identification number to verify eligibility. If the update has not been installed, scheduling it promptly can at least align the vehicle with the protections contemplated by the settlement and may reduce the chance of opportunistic theft.
Those who have already had the update installed should document any theft or attempted theft carefully, including police reports, photographs, and repair receipts, to be ready to file a restitution claim once the April 29, 2025, window opens. Keeping records organized now will matter if the claims process becomes competitive for limited settlement funds. Owners should also monitor official communications from their state attorneys general and from Hyundai and Kia for instructions on how and when to submit claims, what expenses qualify, and what deadlines apply.
In the meantime, drivers can treat the software fix as one layer of defense rather than a complete solution. Simple steps-such as parking in well-lit areas, using steering wheel locks, or adding aftermarket alarms-may help deter thieves who still target these models. While those measures fall outside the scope of the settlements, they reflect the practical reality embedded in the agreements themselves: even with updated software and a restitution pathway, many Hyundai and Kia owners will continue living with elevated theft risk well into 2025 and beyond.
More from Morning Overview
*This article was researched with the help of AI, with human editors creating the final content.
