Researchers discovered a vulnerability in Kia's web portal that could remotely track, unlock, and start millions of cars by reading their license plates. This serious security flaw highlights the risks associated with connected vehicle technologies and the potential consequences of a data breach. The vulnerability could let attackers gain unauthorized access to a car's functions, posing a threat not just to personal security but also to public safety if used maliciously.

The systems at Kia Motors America suffered DoppelPaymer ransomware attack. The attack affected dealer and customer-facing systems including Mobile UVO link apps, payment services, phone services, owner portal. The attackers demanded about $20 million worth of Bitcoin to decrypt files and not leak the sensitive data online.