Researchers found a serious security vulnerability in Subaru’s Starlink system late last year. It enabled full access to private data including location, emergency contacts, call history, and more. Subaru patched the vulnerability within 24 hours but left broader privacy concerns unresolved.

Now-fixed web bugs allowed hackers to remotely unlock and start any of millions of Subarus. More disturbingly, they could also access at least a year of cars’ location histories—and Subaru employees still can.

Two security researchers discovered a security vulnerability in Subaru’s Starlink-connected vehicles last year that gave them “unrestricted targeted access to all vehicles and customer accounts” across the U.S., Canada, and Japan, according to a Wired report.

SIGN UP for TheStreet’s FREE Daily newsletter 💰💸 From best-selling models from Ford to the ultra-exclusive, racing-bred luxury sports cars by Ferrari, many of the cars available today come with a "connected app" that allows owners to control their cars as if they're some sort of James Bond.

Cybersecurity researchers Shubham Shah and his colleague uncovered a critical vulnerability in Subaru’s STARLINK connected

A vulnerability in Subaru’s Starlink connected vehicle service exposed US, Canada, and Japan vehicle and customer accounts.

Sam Curry’s social media bio describes him as a “bug bounty hunter.” So when he raises an alarm over a security vulnerability that affects Subarus in no less than three large countries, people pay attention.