Subj : Toyota finds more servers have been leaking customer data
To   : All
From : TechnologyDaily
Date : Thu Jun 01 2023 12:30:03

Toyota finds more servers have been leaking customer data

Date:
Thu, 01 Jun 2023 11:14:09 +0000

Description:
Hundreds of thousands of users are affected as Toyota discovers more open 
databases.

FULL STORY
======================================================================

Toyota has found another misconfigured database holding sensitive customer 
information that anyone who knew where to look, would be able to access. 

In a statement, Toyota said that it found the new breach having implemented 
tighter data security controls put in place after a separate misconfigured 
database was discovered earlier this year containing sensitive information on 
more than two million customers, and thought to have been sitting unsecured 
for roughly a decade. 

Details on 260,000 car owners were contained in this newly discovered batch, 
including in-vehicle device identifiers and mapping data displayed in the 
cars navigation system. Given that its pseudonymous, its almost impossible to 
connect it to actual people, without additional data from a separate source. 
Toyota customer breach 

Most of the affected customers were said to be in Japan, however, with an 
undisclosed number residing elsewhere in Asia and Oceania. Some of these 
customers have had information such as names, postal addresses, and email 
addresses exposed, as well as Toyota-issued customer ID numbers and vehicle 
registration/ID numbers. 

The affected customers bought their Toyotas from December 2007 onward, with 
the data being exposed between February 2015 and May 2023. Read more 

> Mercedes-Benz USA accidentally leaked customer data 


 > A critical Barracuda security backdoor has been exploited for months, so 
patch now 


 > Here's our rundown of the best endpoint protection software right now 

While this is definitely a dangerous slip-up, there seems to be good news - 
Toyota claims theres no evidence anyone found the database before it did, as 
the data shows no exfiltration attempts. The company did not elaborate on 
which methods it used to determine this. 

So far, the carmaker isnt responding to media inquiries, TechCrunch says, but 
it did issue an apology and said it would contact all of the affected 
customers with a separate apology. We dont know if it will offer a year of 
identity theft and credit monitoring service, as is standard practice in such 
scenarios. These are the best firewalls right now 

Via: TechCrunch



======================================================================
Link to news story:
https://www.techradar.com/news/toyota-finds-more-servers-have-been-leaking-cus
tomer-data


--- Mystic BBS v1.12 A47 (Linux/64)
 * Origin: tqwNet Technology News (1337:1/100)

.