[Mosely]

Was sitting on the couch with the wife watching TV, suddenly she got an alert to her phone from the BMW connected app saying "The panic alarm on your X7 M50i is going off". We don't have an X7...we have an X5 and an M2.

So she logged into the app and now it shows someone else's 330i in Georgia (we live in Texas) as her registered vehicle. She is able to see all the personal information associated with this car, destinations, home address, sync'd calendar events, etc.

I ran outside to make sure our cars were okay (they were). And we logged in and out of the app. Upon logging back in now it shows a 440i from Las Vegas. Again, we can see all the personal information associated with this new car. I had the ability to remote start, unlock, etc....

Tried calling BMW but they're closed. Will update as more happens but this appears to be a major breach of some sort.

Edit: it's back to normal after 15-20 minutes but some of the calendar events and location history etc from other people's accounts are still visible. It also only happened on her iPhone and not to mine on Android.

[mjr24]

Originally Posted by Mosely

Was sitting on the couch with the wife watching TV, suddenly she got an alert to her phone from the BMW connected app saying "The panic alarm on your X7 M50i is going off". We don't have an X7...we have an X5 and an M2.

So she logged into the app and now it shows someone else's 330i in Georgia (we live in Texas) as her registered vehicle. She is able to see all the personal information associated with this car, destinations, home address, sync'd calendar events, etc.

I ran outside to make sure our cars were okay (they were). And we logged in and out of the app. Upon logging back in now it shows a 440i from Las Vegas. Again, we can see all the personal information associated with this new car. I had the ability to remote start, unlock, etc....

Tried calling BMW but they're closed. Will update as more happens but this appears to be a major breach of some sort.

Works normally for me.....

[GenXer]

No issue here.

[SpaceForRent]

Probably just normal database "maintenance"..
Or
5 + 2 = 7...

Your choice..

Z

[contented]

Mine shows both cars just as it should. No problems.

[Mosely]

Originally Posted by contented

Mine shows both cars just as it should. No problems.

Originally Posted by webmeezer

Probably just normal database "maintenance"..
Or
5 + 2 = 7...

Your choice..

Z

Originally Posted by GenXer

No issue here.

Originally Posted by mjr24

Works normally for me.....

Mine also went back to normal. You guys seem remarkably unconcerned though. Personal information, private calendar events and home addresses being shared aside, imagine someone had triggered the remote start and your car filled up the garage with carbon monoxide or unlocked your doors and your car got broken into. Just saying...

[nioh_lbbm2]

change your password

[Mosely]

Originally Posted by nioh_lbbm2

change your password

That was the first thing I did, but it didn't impact anything at all. Basically every time I opened and closed the app, it would show a new car and new collection of information. No specific locations patterns (Atlanta, Vegas, Northern California, somewhere in France, and one in Germany)

[SpaceForRent]

Not really. If someone was hacking you, odds are you'd never know it. What's the point of letting you know they have your info. Odds are also much greater they can get all that data somewhere else that's a lot easier to hack.

Not saying it's not possible, there are a lot of "script kiddies" out there running hacking scripts they've downloaded, that have no idea how to run them correctly. This sounds more like a normal maintenance cycle or software update (over the weekend typically) that went awry.

Z

[six75LT]

Originally Posted by Mosely

Mine also went back to normal. You guys seem remarkably unconcerned though. Personal information, private calendar events and home addresses being shared aside, imagine someone had triggered the remote start and your car filled up the garage with carbon monoxide or unlocked your doors and your car got broken into. Just saying...

you mean to tell me you can start these cars with just the app now? why didnt i know about this when it was cold outside

[Mosely]

Originally Posted by six75LT

you mean to tell me you can start these cars with just the app now? why didnt i know about this when it was cold outside

Yep! You can do ventilation/AC during the summer too.