logo

Bankrupt scooter startup left one private key to rule them all

ID: b8af7458-4c4e-5291-8baf-c9671a1047d1

STIX ID: report--b8af7458-4c4e-5291-8baf-c9671a1047d1

Feed Name: The Register (Security)

Threat Score
30/100

Date Published: 2026-01-16

Date Updated: 2026-04-26

Author: Carly Page

...
...

An Estonian researcher reverse-engineered Äike e-scooters and discovered all units shipped with the same default private key for Bluetooth authentication; using that key he could locally unlock any affected scooter within range. Because the manufacturer is bankrupt and cloud services are unreliable or unavailable, owners cannot rely on vendor fixes — illustrating a common IoT failure in key management that enables unauthorized access and potential theft.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.