# Startup Accuses Rival of Cyberattack to Steal Driving Model

IQ.Lvbs alleges Comma.ai attempted to breach its systems following a model release.

- **Source:** [www.theregister.com - Articles (theregister.co.uk)](https://brifing.si/source/e6d4ec13-4d0e-407a-b96d-39609d76c3b1)
- **Published:** 2026-10-20
- **Topic:** [Software & Engineering](https://brifing.si/c/engineering)
- **Original article:** <https://www.theregister.com/cyber-crime/2026/10/20/auto-tech-startup-claims-it-traced-hack-attempt-back-to-rivals-ip-address/5304281>
- **On Brifing:** https://brifing.si/s/a7fad868-b297-4332-8dad-961483e47292

## Security Breach Allegations

Automotive startup IQ.Lvbs claims its IT systems faced repeated hacking attempts between October 7 and 14. The company alleges these attacks targeted its NovaSpark driving model, attempting to access private user files and exploit sign-in systems. IQ.Lvbs asserts that the incoming requests originated from an IP address associated with rival firm Comma.ai.

## NovaSpark Beta Launch

On October 3, IQ.Lvbs introduced the private beta of its NovaSpark model within the Comma.ai Discord channel. This integration was necessary because the model relies on Comma.ai camera hardware designed for self-driving vehicles. Shortly after the launch, IQ.Lvbs and its beta testers were banned from the platform, escalating tensions between the two entities.

## Competitive Model Claims

IQ.Lvbs designer Cat suggests the attacks stem from NovaSpark outperforming Comma.ai’s current models. The startup argues that its technology threatens Comma.ai’s core business model of selling hardware tied to AI performance. They claim Comma.ai has remained stagnant in model improvements, prompting IQ.Lvbs to develop a superior alternative to existing industry standards.

## Intellectual Property Dispute

Harald Schäfer, CTO of Comma.ai, alleged in a Discord message that NovaSpark is merely a fine-tuned version of their Rebellious Hope model. IQ.Lvbs vehemently denies this, stating that Comma.ai lacks the necessary model weights or ONNX files to verify such claims. The startup maintains that its development work was entirely independent and original.

## Digital Evidence Logs

To support its accusations, IQ.Lvbs published log data identifying the username haraschax as being linked to the suspicious IP addresses. This specific username is reportedly used by Schäfer on GitHub. Despite these public disclosures, Comma.ai and Schäfer have not responded to multiple requests for comment regarding the alleged security incident or the logs.

## Regulatory Context

Comma.ai is currently under investigation by the National Highway Traffic Safety Administration regarding its driving automation technology. The federal probe aims to determine if the company's systems contributed to five separate crashes and three deaths. This ongoing regulatory scrutiny adds significant pressure to the firm while it faces these new cybersecurity allegations.

## Legal Action Considerations

IQ.Lvbs is actively reviewing its legal options in response to the alleged unauthorized access attempts. The startup indicated it is considering involving law enforcement authorities to address the security breach. No formal lawsuit has been filed yet, but the company is documenting the incident as part of its potential path toward litigation.

## Industry Implications

This conflict highlights the intense competition within the autonomous driving sector, where model performance directly dictates market viability. The dispute underscores the fragility of open-source community channels when proprietary interests clash. As startups race to improve AI driving capabilities, security and intellectual property protection remain critical, often volatile, components of their operational strategy.

## Sources covering this story

- https://www.theregister.com/cyber-crime/2026/10/20/auto-tech-startup-claims-it-traced-hack-attempt-back-to-rivals-ip-address/5304281 — 

---

_Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._
