this post was submitted on 16 Jun 2023
10 points (100.0% liked)

Cloud Security

829 readers
2 users here now

Preventing storms.

Rules

  1. Be excellent to each other!
  2. Use the article title as the submission title. Do not editorialize the title or add your own commentary to the article title.
  3. No vendor spam. Zero tolerance for content marketing.

founded 2 years ago
MODERATORS
0xCBE
10
Toyota admits to yet another cloud leak (www.theregister.com)
submitted 2 years ago by 0xCBE to c/cloudsecurity
2 comments fedilink hide all child comments
 

"Toyota said it had no evidence the data had been misused, and that it discovered the misconfigured cloud system while performing a wider investigation of Toyota Connected Corporation's (TC) cloud systems.

TC was also the site of two previous Toyota cloud security failures: one identified in September 2022, and another in mid-May of 2023.

As was the case with the previous two cloud exposures, this latest misconfiguration was only discovered years after the fact. Toyota admitted in this instance that records for around 260,000 domestic Japanese service incidents had been exposed to the web since 2015. The data lately exposed was innocuous if you believe Toyota – just vehicle device IDs and some map data update files were included. "

you are viewing a single comment's thread
view the rest of the comments
[–] Captain 3 points 2 years ago (1 children)

They say it's cloud breach by I didn't see what kind of cloud breach. Did I just miss it or was it not mentioned?

[–] 0xCBE 2 points 2 years ago

This is the official statement I think: https://global.toyota/jp/newsroom/corporate/39174380.html but it's light on details (I think, I google translated)

From reading around it looks like it was either a compute instance or a database exposed by mistake, nothing sophisticated.