This privacy flaw lets anyone track you using signals from your car's tire pressure sensors

Researchers at the IMDEA Networks Institute have uncovered a significant privacy flaw in modern automobiles. A recent 10-week study revealed that the Tire Pressure Monitoring System, a mandatory safety feature in many regions since the late 2000s, broadcasts unencrypted signals that can be intercepted to track vehicle movements in real time. Because these sensors transmit a permanent, unique identifier in plain text (unencrypted text) to alert the car's computer of underinflated tires, third parties can easily capture these radio waves.

Unlike traditional camera-based surveillance that requires a direct line of sight, these automatic tire sensor signals pass through walls and other vehicles. This allows small, hidden wireless receivers — costing as little as $100 each — to capture data from moving cars at distances exceeding 50 meters (164 feet).

During field measurements, the research team collected over six million messages from more than 20,000 vehicles. By matching the signals from all four tires, a network of these low-cost receivers can systematically infer highly sensitive information, including a driver's daily schedule, vehicle type, and even the weight of the cargo being transported.

The findings — detailed in the research paper accepted for IEEE WONS 2026 — highlight a glaring gap in current vehicle cybersecurity regulations. The researchers say that because the monitoring systems were originally designed exclusively for safety rather than security, the lack of basic authentication leaves drivers vulnerable to passive, large-scale surveillance. Consequently, researchers are strongly urging policymakers and automotive manufacturers to mandate tough privacy-focused measures in future vehicle architectures to prevent routine safety systems from being weaponized.