TechCrunch Summary (2023-05-12 05AM)

Source: Toyota Japan exposed data on millions of vehicles for a decade

Summary
Toyota Japan has revealed that millions of customers’ vehicle data details were left on the public internet for a decade due to a “cloud misconfiguration”, which was discovered in April 2021. The data exposed includes registered email addresses, vehicle-unique chassis, navigation terminal numbers and location, and time of each vehicle. The company confirmed that the data breach involved only Toyota vehicles in Japan and Lexus car owners who signed up to G-Link service.

Fact

🚗 Millions of Toyota customers’ personal and vehicle information was exposed to the internet for a decade due to “cloud misconfiguration”.

👤The data exposed includes registered email addresses, vehicle-unique chassis and navigation terminal numbers, location, and time of each vehicle and videos from the vehicle’s “drive recorder”.

📈 The data breach involved only Toyota vehicles in Japan and Lexus car owners who signed up to G-Link service.

🛡️ Toyota confirmed that the data was secured, but has not seen any evidence that the data was obtained or maliciously used by threat actors.

📅 This is not the first time Toyota has exposed customer data – in 2022, it admitted to exposing about 300,000 customer email addresses for close to five years after a subcontractor inadvertently uploaded part of the company’s source code to the internet.

Leave a Reply Cancel reply