The Tesla Motors Inc. Model X sport utility vehicle (SUV).
David Paul Morris | Bloomberg | Getty Images
A Tesla Model X totaled in the U.S. late last year suddenly came back online and started sending notifications to the phone of its former owner, CNBC executive editor Jay Yarow, months later.
The car or its computer was suddenly online in a Southern region of war-torn Ukraine, he found by opening up his Tesla app and using a geolocation feature. The new owners in Ukraine were tapping into his still-connected Spotify app to listen to Drake radio playlists, he also discovered.
When Yarow posted about this to the social network X, formerly known as Twitter, his post went viral, and followers wanted to know why this this happening and whether it was a security risk.
According to the CTO of automotive security firm Canis Labs, Ken Tindell, there can indeed be a security risk with totaled cars that are restored.
He explained in an e-mail to CNBC, “The credentials to internet services are clearly left in the vehicle electronics and then can be used by whoever gets hold of the electronics.” He added, “In general it’s possible to get data out of working electronics — it’s merely a question of how much effort that takes.”
This is far from a Tesla-specific issue, he said. Cars, like laptops, smartphones, and even refrigerators and TVs, are now internet-connected devices that can store personal data.
“I think it needs to be more widely understood by dealers and owners that there is this issue of private data within the vehicle,” Tindell said.
Overseas demand for totaled Teslas
How did the vehicle end up in Ukraine?
CNBC found that after the car was totaled, online auction site Copart listed it for sale, according to website listings. The company, which currently has more than 1,600 Tesla vehicles listed for sale, is connected to salvage yards across the U.S., including one in New Jersey where the car ended up.
Copart specializes in damaged or totaled vehicles that have what’s called a “salvage title,” issued when an insurance company declares it a total loss, warning future buyers that there was a significant problem. Copart sells more than 2 million vehicles a year, with operations in 11 countries, according to the company’s website.
Such vehicles cannot legally drive on U.S. roadways, but some countries aren’t as stringent.
“Cars go to the repair shop or junk yard then find their way to a second market and then are suddenly being shipped overseas,” said Mike Dunne, a former General Motors international executive who now serves as CEO of auto consulting firm ZoZoGo.
The practice has been going on for decades and accelerated with the rise of digital auctions, according to Steven Lang, an auctioneer and founder of used car marketplace 48 Hours And A Used Car.
“Starting in the Y2K era, the digital auction site took over. So now you can have someone in Ukraine bidding on it. And then someone else from Norway bidding on it … and you haven’t even touched an American border or an American bidder,” said Lang, who has been in the vehicle auction business for more than 24 years.
“Virtually all of the vehicles that are totaled will end up at a salvage auction,” he said.
One online auction website that specializes in such sales estimated the winning bid for the vehicle would be between $27,400 and $29,400. A final sale price was not immediately known. Neither the salvage yard nor Copart immediately responded for comment about the vehicle and who bought it.
What owners can do after the fact
Tesla support staff told Yarow he should disconnect his car from his account, offering the following instructions via email:
1. Open the Tesla app Tap profile icon in top-right corner
2. Tap ‘Add/Remove Products’ > ‘Remove’ > ‘Vehicle’
3. Select the VIN, then tap ‘Get Started’
4. Enter the vehicle and sale details, then tap ‘Next’
5. Enter the new owner information, then tap ‘Next’
6. Enter security code from e-mail, then tap ‘Confirm’
7.Submit the request by clicking on ‘Remove Vehicle’
Reminder: If it asks if you sold the vehicle say yes.”
Tesla didn’t tell him how he was supposed to obtain the new owner information as he hadn’t sold the car.
According to Canis Labs CTO Ken Tindell, disconnecting one’s account from a totaled vehicle can help stop others from using apps that had been connected, such as Spotify in Yarow’s case. However, data could still be extracted from the totaled vehicle’s electronics.
“What would the trip history and phone book of a celebrity be worth to a blackmailer or a kidnapper?” Tintell asked.
He and other security experts compared the situation having an Apple laptop stolen. In some cases, Apple can wipe the laptop or device clean remotely when it comes online. But “a malign repair shop can take out the hard drive and copy all the data off it before scrapping a broken laptop.”
This is why Apple routinely encrypts its hard drives, the CTO noted. “It’s the only way to prevent the data being stolen by someone with physical access to an offline device.”
An automotive cybersecurity veteran and the founder of RightHook, Warren Ahner, said that ideally a company like Tesla would “Have a portal where a user can sign in with online credentials and say ‘remove all my info, then disconnect my vehicle from the account,’ and would be able issue a remote-wipe command to the car when it comes online, deleting it all including GPS, saved locations and the rest.”
However, he said, owners can be their own “personal risk police,” and avoid giving their vehicles or rental cars that they use lots of personal info.
“Always purge your data after you are done with the vehicle and try not to share more info with the car than you absolutely need to share,” Ahner recommended. “If I pair my phone with the car I’m renting or owning I don’t allow it to synch location and contacts. I only give it Bluetooth access to talk over the top of my music and so I can us whatever music streaming app I like.”
An automotive white hat hacker who uses the handle Green the Only has been sounding the alarm about data on cars for years. “All the phone directory and calendar stuff might be valuable,” he said.
Once a car or car computer has changed possession is back online, he says that the previous owners “can’t do much.” One problem is that an old owner can “accrue charges for Supercharging,” and other items Tesla — or other vehicle makers — may sell on a subscription or pay-per-charge basis. They can always submit a request to Tesla to remove the car from their account, but that’s it.
Green the Only agreed with Tindell and Ahner — Tesla “probably can add a ‘remote wipe and then remove from my account’ in addition to the ‘remove from my account’ option they have now. They probably should have added that long ago.”
Bob Hartheimer, CEO of Tennessee’s Evolve Bank & Trust, was fired after U.S. law enforcement officials caught him propositioning a law enforcement officer posing as a 15-year-old boy on gay dating app Grindr.
On Oct. 19, an employee of the Federal Bureau of Investigation logged onto Grindr while pretending to be a teen boy, and a user called “Tomm” wrote a message to that person saying, “Hey any chance u would hu with an older and chill guy,” according to an affidavit from a special agent with the Federal Bureau of Investigation that was unsealed on Tuesday.
The two discussed getting together in person later in the week, according to the affidavit. On Snapchat, they talked about the sex acts they might perform. “Tomm” asked for a photo of the “boy” without shorts on, and he also sent the undercover agent a picture of himself naked. The FBI was able to obtain an IP address for “Tomm” from Snapchat, as well as an address from Comcast, the affidavit showed.
Hartheimer was arrested in Memphis on Oct. 23 for attempted production of child pornography and transfer of obscene material to a minor, according to a warrant.
Blake Ballin, a lawyer representing Hartheimer, told CNBC on Saturday that Evolve has fired the CEO.
“Bob’s family is aware of the charges,” Ballin wrote in an email. “His family loves and supports him and requests privacy during this difficult period in their lives. We have no further comment at this time.”
The Wall Street Journal reported on Hartheimer’s firing from Evolve Bank on Friday. The bank did not respond to a request for comment from CNBC.
Last year, Evolve was caught up in the bankruptcy of financial technology startup Synapse, which cut off access to a system for handling transactions and account details. Fintech apps such as Yotta worked with Evolve and other banks, with Synapse acting as a middleman.
Synapse’s method of keeping app users’ money in various banks, including Evolve, created accounting problems, and up to $96 million in deposits went missing. Thousands of Americans lost money, CNBC reported.
In 2024, Evolve also suffered a cyberattack, during which hackers obtained customer information and demanded a ransom. The bank said it did not pay any ransom and the data was eventually posted online.
In August, Evolve, founded in 1925, named Hartheimer to replace CEO Scott Stafford, who retired after joining the bank in 2004.
“This is a structural change, demonstrating our continued commitment to doing the hard work to earn back the trust of our customers, employees, regulators, and investors,” Evolve said.
When he was hired, the bank touted Hartheimer’s experience as director of the Federal Deposit Insurance Corporation’s Division of Resolutions, as well as his years as a regulatory consultant for fintech companies.
“Over the past four decades, I’ve led, turned around, and advised institutions across the financial landscape,” Hartheimer wrote on his LinkedIn profile.
The bank reported net losses for each of the first three quarters of 2025 after being profitable since 2003, according to data on file with the Federal Financial Institutions Examination Council.
— CNBC’s Dan Mangan and Hugh Son contributed reporting.
Disclosure: Comcast is the parent company of NBCUniversal, which owns CNBC. Versant would become the new parent company of CNBC upon Comcast’s planned spinoff of Versant.
The logo of Chinese-owned semiconductor company Nexperia is displayed at the chipmaker’s German facility, after the Dutch government seized control and auto industry bodies sounded the alarm over the possible impact on car production, in Hamburg, Germany, Oct. 23, 2025.
Jonas Walzberg | Reuters
Netherlands-based chipmaker Nexperia is at the heart of a standoff between the European Union, the U.S. and China that has triggered a near-crisis for global automakers.
The Dutch government seized control of Nexperia, owned by the Chinese company Wingtech, in October, citing national security concerns. The move prompted Beijing to block Nexperia products from leaving China.
Meetings are underway in Europe Saturday to attempt to defuse the escalating issue, and Chinese and U.S. authorities appear to be opening up a pathway for Nexperia’s China-based operations to resume exporting critical automotive chips.
Spokespeople for the White House and Nexperia did not immediately respond to a request for comment.
For now, however, the auto industry’s supply chain still hangs in the balance.
The dispute is threatening vehicle production worldwide as automakers warn of looming shortages of the chipmaker’s components, which are critical to basic electrical functions in cars and challenging to replace on short notice.
The battle has unfolded amid heightened scrutiny of Chinese-linked tech firms from Western governments, including the U.S., which recently tightened export-control rules to limit technology transfers to Chinese-owned entities.
Nexperia’s owner, Wingtech, was put on a U.S. blacklist in December 2024 for its alleged role “in aiding China’s government’s efforts to acquire entities with sensitive semiconductor manufacturing capability.”
Here’s what to know about where the dispute stands, and why it matters.
Why are Nexperia chips so important?
Nexperia manufactures billions of so-called foundation chips — transistors, diodes and power management components — that are produced in Europe, assembled and tested in China, and then re-exported to customers in Europe and elsewhere. Around 70% of chips made in the Netherlands are sent to China to be completed and re-exported to other countries.
The chips are basic and inexpensive, but are needed in almost every device that uses electricity. In cars, those chips are used to connect the battery to motors, for lights and sensors, for braking systems, airbag controllers, entertainment systems and electric windows.
While automakers typically have some stockpiles and alternative suppliers, it is difficult to switch supply sources overnight.
What happened and where do things stand?
In September, the Dutch government invoked a Cold War-era law to effectively take control of Nexperia, amid concerns that its Chinese owner was planning to shift intellectual property to another company it owned. A Dutch court also suspended Nexperia CEO, Wingtech founder Zhang Xuezhen, citing mismanagement.
Beijing retaliated weeks later by imposing export controls on certain Nexperia products made in China, escalating tensions and fueling fears of a broader supply chain shock. That prompted the company to tell carmakers it could no longer guarantee supplies.
But signs of a breakthrough have started to emerge.
On Friday, reports said the U.S. plans to announce that Nexperia will resume sending chips under a framework agreement reached during talks between President Donald Trump and Chinese leader Xi Jinping, citing sources familiar with the matter. And on Saturday, China said it will exempt some Nexperia chips from its export ban. Chinese officials did not specify what those exemptions could entail.
“We will comprehensively consider the actual situation of the enterprise and exempt eligible exports,” The Chinese Commerce Ministry said in a statement.
If finalized, the exemptions could ease immediate pressure on automakers. But the broader dispute over ownership, technology control and security oversight remains unresolved.
META CEO Mark Zuckerberg (L) and Microsoft CEO Satya Nadella.
Getty Images
As tech giants increase their already breathtaking spending on artificial intelligence, their respective digital advertising businesses have also gained momentum.
Quarterly earnings reports this week from Meta, Amazon, Alphabet and Microsoft all showed healthy revenue on the ads front.
The rising online advertising sales have allayed concerns earlier this year that economic turbulence, amplified by President Donald Trump‘s trade policies, would negatively impact ad budgets.
“I think the digital ad market is strong,” said Jasmine Enberg, co-founder of Scalable, a creator economy media firm. “I think this economic instability and volatility is kind of priced in for a lot of people at this point; sort of seems to be the status quo.”
Meta topped its rivals for the quarter with the fastest ad-related sales growth.
CEO Andy Jassy highlighted on Amazon’s earnings call that the company is continuing to expand its ad-specific demand-side platform to more third-party apps and sites.
“You look at some of the partnerships that we’ve done, the Roku partnership gives us the largest connected TV footprint in the U.S.,” Jassy said. “And you layer on top of that what we’ve recently done in providing our DSP customers the opportunity to integrate with the ad inventory in Netflix and Spotify and SiriusXM, it’s powerful.”
Andy Jassy, chief executive officer of Amazon.com Inc., speaks during an unveiling event in New York, US, on Wednesday, Feb. 26, 2025.
Michael Nagle | Bloomberg | Getty Images
Alphabet’s overall advertising sales for the third quarter came in at $74.18 billion, a 13% increase from $65.85 billion a year ago. Third-quarter online ad sales for YouTube rose 15% to $10.26 billion.
Microsoft’s search and news advertising unit brought in $3.7 billion in the company’s fiscal first quarter, a 14% increase from the $3.2 billion it recorded the previous year.
Even if there’s been some pullback in ad budgets due to economic uncertainty, it’s likely that companies shifted some of that spending from traditional businesses like newspapers to digital ad platforms, said Jeremy Goldman, senior director of content at Emarketer.
“I think what could be happening is more of a no-brainer,” Goldman said. “To put your money in social, and to put your money in retail media and to put your money in search ad spending.”
It wasn’t just the megacaps that showed hefty online ad growth this week.
Reddit on Thursday reported a 68% jump in third-quarter sales, soaring past analyst estimates. The company said global daily active uniques grew 19% year-over-year to 116 million, surpassing estimates of 114 million.
Snap and Pinterest are scheduled to report results next week.
Going big on AI
The tech giants all made clear that they don’t see any broader economic concerns that would warrant a reduction in their AI spending, and instead lifted their guidance for capital expenditures, despite concerns of a bubble.
Alphabet, Meta, Amazon and Microsoft collectively expect capex spending above $380 billion this year, which is still a fraction of the $1 trillion worth of data center and cloud computing deals that OpenAI has recently announced with its partners like Nvidia, Oracle and Broadcom.
But while investors cheered Amazon and Google, they were less thrilled with Microsoft, and especially Meta.
The Facebook parent’s stock tanked 11% on Thursday after the company said it would raise the low end of its capex guidance to between $70 billion and $72 billion from the prior range of $66 billion to $72 billion.
Oppenheimer analysts downgraded Meta stock to the equivalent of a hold from buy, because they said it’s less obvious how the social media company will benefit from its AI investments relative to its big tech rivals that also operate cloud computing services.
“Significant investment in Superintelligence despite unknown revenue opportunity mirrors 2021/2022 Metaverse spending,” the Oppenheimer analysts wrote, contrasting the company’s big AI spending related to its Superintelligence Labs to its money-losing Reality Labs division, which makes virtual reality and augmented reality technologies.
Susan Li, Meta’s finance chief, said Wednesday during a follow-up earnings call that it’s important for the company to invest in AI-related data center and third-party cloud computing services or risk falling behind, echoing similar comments made by CEO Mark Zuckerberg.
“The highest priority for the company is investing our resources to position ourselves as a leader in AI,” Li said. “That means that I think for the immediate period of time ahead of us, we could see some financial pressure during which our operating profit could be lumpy.”
Meta has continued to point to how its AI investments are improving its online advertising business, but it’s having a more difficult time showing how that spending will benefit the company in the future, Enberg said.
“I think part of that is that we’ve heard the story now quarter after quarter that it is able to integrate AI into its ad business and use that as a growth engine,” Enberg said. “What comes next is harder to articulate, and far less tangible for investors and other people who follow the space.”
Still, Meta is experiencing some growth in new products like the Meta AI app that contains the Vibes AI-powered short video service, Goldman said.
The company can also still expand more into subscriptions or even potentially offer enterprise AI services to sell to corporations, which is “an area that they haven’t played at all,” he said.
For now, Meta’s digital advertising unit remains its core business, and just like previous quarters, it’s unclear how the economy will impact ad budgets.
With the holiday season approaching, all eyes will be focused on whether the lingering economic concerns or tariff-related price hikes lead to consumers curbing their spending, which could impact corporate marketing campaigns.
“The next test will be when we get to the Black Friday numbers,” Goldman said. “Are those going to be below expectations?”