Toyota Security Breach Exposes Personal Info of 3.1 Million Clients (bleepingcomputer.com) 19
An anonymous reader quotes a report from BleepingComputer: The personal information of roughly 3.1 million Toyota customers may have been leaked following a security breach of multiple Toyota and Lexus sales subsidiaries, as detailed in a breach notification issued by the car maker today. As detailed in a press release published on Toyota'a global newsroom, unauthorized access was detected on the computing systems of Tokyo Sales Holdings, Tokyo Tokyo Motor, Tokyo Toyopet, Toyota Tokyo Corolla, Nets Toyota Tokyo, Lexus Koishikawa Sales, Jamil Shoji (Lexus Nerima), and Toyota West Tokyo Corolla. "It turned out that up to 3.1 million items of customer information may have been leaked outside the company. The information that may have been leaked this time does not include information on credit cards," says the data breach notification. Toyota has not yet confirmed if the attackers were able to exfiltrate any of the customer personal information exposed after the IT systems of its subsidiaries were breached. Toyota said in a statement: "We apologize to everyone who has been using Toyota and Lexus vehicles for the great concern. We take this situation seriously, and will thoroughly implement information security measures at dealers and the entire Toyota Group."
Re:Clients? (Score:4, Informative)
Wow. (Score:2)
Glad I didn't buy one.
Credit Cards? (Score:3)
It says the leak doesn't include any credit card information. Uh...who buys a car with a credit card? What about loan/bank/financing information? (Not to mention SSN, DOB, address, et cetera.)
Re: (Score:2)
Re: (Score:2)
Yeah, yeah, of course. But c'mon. To mention "credit cards" and not complete auto financing seems surprising, to me, given the entities that are involved.
Until there's a big fine, this will keep happening (Score:2)
Once again a major corporation leaves its customers twisting in the wind. Why even call them customers? At this point, "Johns" would be a better description, because they're paying money and getting fucked.
And this will keep going on until the courts levy an enormous, damaging fine against a corporation that allows a major data breach due to negligence or other culpable failure. I'd suggest Wells Fargo as a great place to start.
Oddly, they have good vehicle security team (Score:2)
I keep getting called about joining their team responsible for security of in-vehicle computers. I've met some of the people on that team. THAT team seems to be pretty good, well-staffed.
Apparently somebody on another team screwed up, though.
Suspicious article (Score:1)