They've been sued, a bunch, and keep paying the fines, as many other large companies do as a cost of doing business because the fines are insignificant relative to revenue and profits generated by illegal behaviors.
The question is, when will enforcement and financial and legal liability finally raise the cost of illegal behavior to something corporations won't routinely do?
They have been sued true, but they need to be sued by the U.S. people, class action lawsuits, and publicity to STOP purchasing these security nightmares.
Think if it was on purpose, that a car company sold the cheapest vehicles available for millions of people, only for them all to find out that the cars were made to be stolen via USB keys, then that the website to sell them, is "hacked" so that all cars are monitored.
Sounds like a type of "weapon" if you ask me. When will people understand that the vehicles they drive, are weapons... make sure you know what type of vehicle you are buying. Purchase vehicles that are about 10 years old, after all the recalls, theft alerts, engine lockups, battery explosions, etc, have happened and you can pick from the few reliable options (and years), that built quality of any type.