Li Auto electric car owners in Russia locked out of their cars and extorted after attackers re-register the car's expired eSIM and take over the owner account

Attackers are taking over the master user accounts of Li Auto smart EVs sold in Russia (grey-import exports). Using Li Auto VINs leaked in earlier data breaches, they find cars whose linked eSender eSIM number has expired, re-register the eSIM and the car to a new account, create a new master digital key, then lock the doors and engine and message the owner for a ransom (about $500-600 now; over $3,000 in a first wave in July 2025). Alexander Rasfairy, co-founder of a Li Auto car club, told autonews.ru at least 20 owners have confirmed hacks in this second wave, and the real number is likely higher (reported by Risky Business, 4 Nov 2026). Li Auto is reportedly aware and working on email-based master account registration so exported cars no longer need a Chinese phone number. Exact models and start date of the current wave are unknown.