{
  "$schema": "https://themachinepress.com/schemas/story-v1.schema.json",
  "schema_version": "1.0.0",
  "document_type": "machine_press_story",
  "story": {
    "story_id": "mp-2026-07-22-001",
    "source_story_id": "tmp-lead-karr-shared-key-car-vulnerability",
    "edition_id": "mp-2026-07-22-morning-0013",
    "edition_url": "https://themachinepress.com/edition/2026-07-22",
    "position": 1,
    "story_type": "lead",
    "section": "safety-security",
    "editorial_classification": "editorial",
    "headline": "The Anti-Theft Box Shared One Key With Millions of Cars",
    "slug": "the-anti-theft-box-shared-one-key-with-millions-of-cars",
    "dek": "Researchers found a common Bluetooth key in dealer-installed KARR/SWDS systems; owners must use the app to install a July 20 patch.",
    "summary": "Researchers found a common Bluetooth key in dealer-installed KARR/SWDS systems; owners must use the app to install a July 20 patch.",
    "body_text": "UC San Diego researchers say dealer-installed KARR/SWDS devices left at least 2.2 million vehicles vulnerable because every unit relied on the same cryptographic key. From within roughly five yards, an attacker who possessed that key could unlock doors or immobilize an engine; separate tools would still be needed to start and steal a vehicle. Manufacturer Acrisure released a firmware patch July 20, but owners must install it through the KARR app. The team disclosed the flaws to manufacturers, vendors, and the National Highway Traffic Safety Administration and withheld exploit details.",
    "why_it_matters": "Researchers found a common Bluetooth key in dealer-installed KARR/SWDS systems; owners must use the app to install a July 20 patch.",
    "limitations": [],
    "importance": 10,
    "canonical_url": "https://themachinepress.com/story/mp-2026-07-22-001/the-anti-theft-box-shared-one-key-with-millions-of-cars",
    "json_url": "https://themachinepress.com/story/mp-2026-07-22-001.json",
    "first_published_at": "2026-07-22T09:00:00.000-04:00",
    "modified_at": "2026-07-22T09:00:00.000-04:00",
    "content_status": "new",
    "is_carryover": false,
    "carryover_reason": null,
    "key_claims": [
      {
        "claim_id": "claim-mp-2026-07-22-001-001",
        "text": "Researchers found a common Bluetooth key in dealer-installed KARR/SWDS systems; owners must use the app to install a July 20 patch.",
        "source_ids": [
          "source-2026-07-22-001"
        ],
        "qualification": null
      }
    ],
    "source_ids": [
      "source-2026-07-22-001"
    ],
    "tags": [
      "automotive security",
      "Bluetooth",
      "software patch"
    ],
    "image_url": "https://themachinepress.com/issues/2026-07-22/lead-shared-car-security-key.png",
    "corrections": []
  },
  "sources": [
    {
      "source_id": "source-2026-07-22-001",
      "title": "UC San Diego via Newswise: Dealer-installed car security vulnerability",
      "publisher": "University of California San Diego via Newswise",
      "url": "https://www.newswise.com/articles/2-million-cars-with-anti-theft-systems-installed-by-dealers-are-at-higher-risk-of-theft",
      "canonical_url": "https://www.newswise.com/articles/2-million-cars-with-anti-theft-systems-installed-by-dealers-are-at-higher-risk-of-theft",
      "source_type": "official_announcement",
      "is_primary_source": true,
      "published_at": null,
      "accessed_at": "2026-07-22T08:25:00.000-04:00",
      "supports_claim_ids": [
        "claim-mp-2026-07-22-001-001"
      ]
    }
  ],
  "corrections": [],
  "publisher": {
    "name": "The Machine Press",
    "url": "https://themachinepress.com",
    "description": "A daily newspaper for the age of artificial intelligence."
  },
  "cite_this_report": {
    "title": "The Anti-Theft Box Shared One Key With Millions of Cars",
    "publisher": "The Machine Press",
    "published_at": "2026-07-22T09:00:00.000-04:00",
    "canonical_url": "https://themachinepress.com/story/mp-2026-07-22-001/the-anti-theft-box-shared-one-key-with-millions-of-cars"
  }
}