Originally Posted by Poqman

Infrared, I agree with you that the root problem is Lexus allowed your VIN # to be hijacked by someone else. There should be fail-safes in place that if a new Enform user tries to register a VIN # that is already registered, then Lexus should question the new user if the VIN was input correct letting the applicant know that the VIN had already been registered. If I was registering a new car, then telling me the VIN was already registered would be a flag to review the VIN I had entered. If it were a used car I was buying, then it is expected that the VIN may have already been registered. So forcing the VIN to be entered twice to assure accuracy may be the simple fix by Lexus.

I hope you get some resolution with Lexus because I'm sure I would not like this happening to me. Best of luck.

Originally Posted by Infrared

Beautiful but deadly.

My brand new 2015 Lexus RC350 F-Sport was running this morning in the garage when we came down for breakfast at 630am.

I don't know how long it had been running, but the garage was thick with CO. I immediately opened the garage door, ran over to open the car door and turn it off, but the doors were locked.

I quickly hunted for my key fob and unlocked and shut the car down. I still have a headache even though I was trying not to breathe the fumes.

How could this happen?

have been on the phone with Lexus back and forth today and apparently, someone at Lexus assigned someone else to my car (with my VIN!) via their remote start phone app (Enform) and that party thought they were remote-starting THEIR car when in fact they were starting my car, in my garage.

No one died this time, but I'm not sure I can safely even put the car in the garage knowing this is now possible. Not surprisingly, Lexus has been less than helpful on the phone so far today, and they seem clueless as to how this is even possible.

Lexus brought the Enform representative in on the conversation (Channelle L. is all I know) and she had the audacity to tell me I had to prove I own the vehicle because they don't have me listed. This is where I went sort of ape-**** on them. This brand new Lexus could have killed my entire family, including my 6 week old son who sleeps in the room right above my garage. Somehow, some way, Enform seems to have "lost" my information from November 5th to now.

I bought the car November 5th (first one owned in Colorado, yay...), and used the Enform remote start app a handful of times during the first 2 months of ownership. So clearly they knew who I was THEN. I have the app on my phone (and anyone who has set this up knows you have to go through a very lengthy authentication process via your SOS button in the car) and everything was fine. To be clear, I'm the ONLY one who has ever had the app or the ability to remote-start my car.

Then, around January 2nd, I received an email from Enform that a vehicle had been "deleted" from my account. I ignored the email, didn't really care, and I assumed I had like a 60 day trial with that app anyway, and that the vehicle was deleted due to the trial running out. I typically ignore emails like that. No big deal I figured, and I was not going to call Enform subscription services to renew the account.

Fast forward to today, and apparently this was a big deal. Apparently Lexus/Enform did something that you would think would not be possible due to authentication, due to VIN's being used, etc. etc. -but they managed to anyway.

To use the remote start app, you have to enter a LOT of information, including a password multiple times. They (Lexus) did confirm with me this morning that they see "someone else" was listed as the subscriber on my account. Which of course, should be impossible, since I am the only person who owns the car or is listed anywhere.

This is how technology can kill you.