Toyota Security Breach Exposes Personal Info of 3.1 Million Clients (bleepingcomputer.com)
An anonymous reader quotes a report from BleepingComputer: The personal information of roughly 3.1 million Toyota customers may have been leaked following a security breach of multiple Toyota and Lexus sales subsidiaries, as detailed in a breach notification issued by the car maker today. As detailed in a press release published on Toyota'a global newsroom, unauthorized access was detected on the computing systems of Tokyo Sales Holdings, Tokyo Tokyo Motor, Tokyo Toyopet, Toyota Tokyo Corolla, Nets Toyota Tokyo, Lexus Koishikawa Sales, Jamil Shoji (Lexus Nerima), and Toyota West Tokyo Corolla. "It turned out that up to 3.1 million items of customer information may have been leaked outside the company. The information that may have been leaked this time does not include information on credit cards," says the data breach notification. Toyota has not yet confirmed if the attackers were able to exfiltrate any of the customer personal information exposed after the IT systems of its subsidiaries were breached. Toyota said in a statement: "We apologize to everyone who has been using Toyota and Lexus vehicles for the great concern. We take this situation seriously, and will thoroughly implement information security measures at dealers and the entire Toyota Group."
Wtf they call them clients?
Well, I was considering a Toyota. Not anymore.
Glad I didn't buy one.
Oliver's law of assumed responsibility: If you're seen fixing it, you will be blamed for breaking it.
This was a japanese security breach, these are much better than european or american one's.
--
AmiMoJo
It says the leak doesn't include any credit card information. Uh...who buys a car with a credit card? What about loan/bank/financing information? (Not to mention SSN, DOB, address, et cetera.)
Once again a major corporation leaves its customers twisting in the wind. Why even call them customers? At this point, "Johns" would be a better description, because they're paying money and getting fucked.
And this will keep going on until the courts levy an enormous, damaging fine against a corporation that allows a major data breach due to negligence or other culpable failure. I'd suggest Wells Fargo as a great place to start.
I've calculated my velocity with such exquisite precision that I have no idea where I am.
I keep getting called about joining their team responsible for security of in-vehicle computers. I've met some of the people on that team. THAT team seems to be pretty good, well-staffed.
Apparently somebody on another team screwed up, though.
Going to be great when they breach and hack all the self driving cars.
“unauthorized access was detected on the computing systems of Tokyo Sales Holdings, Tokyo Tokyo Motor, Tokyo Toyopet, Toyota Tokyo Corolla, Nets Toyota Tokyo, Lexus Koishikawa Sales, Jamil Shoji (Lexus Nerima), and Toyota West Tokyo Corolla.”
What version of Microsoft windows were these ‘computers’ running on?
Has anyone else noticed something suspicious about the link supposedly pointing to the press release?