Security News > 2023 > May > Toyota finds more misconfigured servers leaking customer info
Toyota Motor Corporation has discovered two additional misconfigured cloud services that leaked car owners' personal information for over seven years.
This finding came after the Japanese carmaker conducted a thorough investigation on all cloud environments managed by Toyota Connected Corporation after previously discovering a misconfigured server that exposed the location data of over 2 million customers for ten years.
"We conducted an investigation for all cloud environments managed by TOYOTA Connected Corporation, It was discovered that a part of the data containing customer information had been potentially accessible externally," reads the new Toyota notice.
The first cloud service exposed the personal information of Toyota customers in Asia and Oceania between October 2016 and May 2023.
Toyota says that data entries were automatically deleted from the cloud environment after a while, so there was a limited amount of data exposed at any given moment.
The carmaker claims that even if the data was accessed externally, it would not be enough to infer identification details about the customer or access the vehicle's systems in any way.