Second Toyota Data Breach: Cloud Misconfiguration Exposes Data of 260,000 Customers

Toyota Motors Corporation has suffered another data breach due to a misconfigured cloud environment, just weeks after the company experienced a similar incident that exposed 2.15 million customers. This latest breach impacted approximately 260,000 customers in Japan, from 2015 to 2023, leaking navigation data, including in-vehicle device ID, map data updates, and update creation dates.

The breach also affected an unspecified number of international customers in Asia and Oceania, with exposed information potentially including names, phone numbers, email addresses, and vehicle identification numbers. However, Toyota maintains that there was no vehicle location data or credit card information leaked. The company has fixed the misconfiguration, implemented a system to monitor cloud configurations, and pledged to deal with each case in accordance with the relevant country’s data protection laws.