Two hackers exposed serious security flaws in a 2023 Subaru Impreza Vulnerabilities in a Subaru web portal allowed the pair remote access Similar issues could affect a number of major automotive brands A pair of hackers have revealed how they remotely took control of a Subaru Impreza,

Researchers found a serious security vulnerability in Subaru’s Starlink system late last year. It enabled full access to private data including location, emergency contacts, call history, and more. Subaru patched the vulnerability within 24 hours but left broader privacy concerns unresolved.

On November 20, 2024, Shubham Shah and Sam Curry discovered a critical security vulnerability in Subaru’s STARLINK connected vehicle service, which allowed unrestricted, targeted access to all vehicles and customer accounts in the United States, Canada, and Japan.