The company said that the “security of FCA US customers is a top priority, as is retaining their confidence in the Company's products. Accordingly, FCA US has established a dedicated System Quality Engineering team focused on identifying and implementing best practices for software development and integration.”

FCA US also said that the “software manipulation” addressed by its recall “required unique and extensive technical knowledge, prolonged physical access to a subject vehicle and extended periods of time to write code.

“No defect has been found. FCA US is conducting this campaign out of an abundance of caution.”

FCA US said that it will be contacting potentially affected customers with these details and has provided the software update to the FCA US dealer network for immediate customer installation. The software update now is available to customers and can be downloaded to a USB drive from http://www.driveuconnect.com/software-update/ and installed in a vehicle.)

In addition, FCA US said that it has been working with its suppliers to implement additional protocols to block remote access. It said that it has applied network-level security measures to prevent the type of remote manipulation demonstrated by Messrs. Miller and Valasek. According to the company, these measures – which required no customer or dealer actions – blocked remote access to certain vehicle systems and were fully tested and implemented within the cellular network on July 23, 2015.

According to FCA US, affected are certain vehicles equipped with 8.4-inch touchscreens among the following populations:

- 2013-2015 MY Dodge Viper specialty vehicles

- 2013-2015 Ram 1500, 2500 and 3500 pickups

- 2013-2015 Ram 3500, 4500, 5500 Chassis Cabs

- 2014-2015 Jeep Grand Cherokee and Cherokee SUVs

- 2014-2015 Dodge Durango SUVs

- 2015 MY Chrysler 200, Chrysler 300 and Dodge Charger sedans

- 2015 Dodge Challenger sports coupes

Meanwhile, two U.S. Senators – Richard Blumenthal (D-Conn.) and Edward J. Markey (D-Mass.), members of the Senate Commerce, Science and Transportation Committee – have introduced legislation that would direct the National Highway Traffic Safety Administration (“NHTSA”) and the Federal Trade Commission (“FTC”) to establish federal standards to secure cars and to protect drivers' privacy. The Security and Privacy in Your Car (“SPY Car”) Act also would establish a rating system – or “cyber dashboard” – that would inform consumers about how well their vehicle protects drivers' security and privacy beyond those minimum standards.

Last year, Senator Markey released the report Tracking & Hacking: Security & Privacy Gaps Put American Drivers at Risk, which detailed major gaps in how auto companies are securing connected features in cars against hackers. For example, only two of the 16 car companies had developed any capability to detect and respond to a hacking attack in real time and, and most customers do not even know that their information is being collected and sent to third parties.

“Rushing to roll out the next big thing, automakers have left cars unlocked to hackers and data-trackers,” said Senator Blumenthal. ”This common-sense legislation protects the public against cybercriminals who exploit exciting advances in technology like self-driving and wireless connected cars. Federal law must provide minimum standards and safeguards that keep hackers out of drivers' private data lanes. Security and safety need not be sacrificed for the convenience and promise of wireless progress. I thank Senator Markey for his leadership and profoundly significant fact-finding in protecting consumers. The road to new auto technology is wide enough for both progress and privacy.”

“Drivers shouldn't have to choose between being connected and being protected,” said Senator Markey. ”We need clear rules of the road that protect cars from hackers and American families from data trackers. This legislation will set minimum standards and transparency rules to protect the data, security and privacy of drivers in the modern age of increasingly connected vehicles. I look forward to working with Senator Blumenthal to ensure auto safety and security in the 21st century.”

Senator Blumenthal added that, “Cyber threats in cars are real and urgent, no figment of the imagination – as this huge recall demonstrates. Incredibly, Chrysler delayed disclosing this chilling cybersecurity danger egregiously and inexcusably, and strong sanctions are appropriate to send a message that other auto manufacturers will heed. This recall is powerful evidence of spreading cyber security threats in all cars – demanding strong protections and a potential investigation by NHTSA.

“Automakers must be held accountable through federal standards – as my legislation with Senator Markey would require – to prevent dangerous, even deadly defects exploited by hackers. NHTSA needs legal tools to keep up with advancing technology, and only Congress can mandate them. The question now is, how many other cars on the road right now leave consumers vulnerable to cyber threats that endanger both safety and privacy.”

The SPY Car Act includes the following cybersecurity and privacy provisions, as well as the establishment of a rating system, or “cyber dashboard”:

I. Cybersecurity Standards

NHTSA, in consultation with the FTC, should develop standards that prevent hacking into our vehicle controls systems. These performance standards should require that:

- Hacking protection: all access points in the car should be equipped with reasonable measures to protect against hacking attacks, including isolation of critical software systems and evaluated using best security practices, such as penetration testing;

- Data security: all collected information should be secured to prevent unwanted access—while stored on-board, in transit, and stored off-board; and

- Hacking mitigation: the vehicle should be equipped with technology that can detect, report and stop hacking attempts in real-time.

II: Privacy standards

The FTC, in consultation with NHTSA, should develop privacy standards on the data collected by our vehicles. These standards should require:

- Transparency: owners are made explicitly aware of collection, transmission, retention, and use of driving data;

- Consumer choice: owners are able to opt out of data collection and retention without losing access to key navigation or other features (when technically feasible), except for in the case of electronic data recorders or other safety or regulatory systems; and

- Marketing prohibition: personal driving information may not be used for advertising or marketing purposes without the owner clearly opting in.

III: Cyber dashboard

NHTSA, in consultation with FTC, should establish a “cyber dashboard” that displays an evaluation of how well each automobile protects both the security and privacy of vehicle owners beyond those minimum standards. This information should be presented in a transparent, consumer-friendly form on the window sticker of all new vehicles.

Learn more: http://www.blumenthal.senate.gov/imo/media/doc/SPY%20Car%20legislation%20BlumenthalMarkey%2020150721.pdf; Senate Report Highlights Automobile Security and Privacy Vulnerabilities.