For the modern driver, the car has become a rolling archive. While consumers often worry about the data their smartphones transmit to the cloud, a significant amount of sensitive information never leaves the vehicle’s physical hardware. Recently, a group of white-hat hackers demonstrated the permanence of this digital footprint by purchasing a used telematics module from a wrecked BYD Seal. From that single component, they were able to reconstruct every mile the vehicle had ever traveled.

These modules, which handle everything from cellular connectivity to GPS positioning, essentially function as unencrypted black boxes. Because the data is stored locally and often lacks robust encryption, anyone with physical access to the hardware can bypass the car’s interface to extract a granular history of its movements and mechanical state. In the case of the salvaged BYD, the researchers found a complete record of the car’s life, effectively resurrecting its history from a scrap heap.

This discovery highlights a growing privacy gap in the automotive industry. While manufacturers often frame connectivity as a convenience or a safety feature, the persistence of data on individual components creates a secondary market for personal information. As cars are sold, wrecked, and parted out, the "right to be forgotten" becomes a physical impossibility. For the millions of vehicles built in the last two decades, the most intimate details of a driver’s routine may be sitting in a salvage yard, waiting for the right tool to unlock them.

With reporting from The Drive.

Source · The Drive