Japanese automaker Toyota Motor has confirmed that the vehicle data of 2.15 million users in Japan was publicly accessible for nearly a decade, from November 2013 to mid-April 2023.
According to the company, the data leak resulted from a “human error” that led to a “cloud environment misconfiguration” that allowed anyone to access its contents without a password.
The exposed data includes in-vehicle terminal IDs, chassis numbers, vehicle locations, and video footage captured by the vehicle’s drive recorder.
The incident is said to have impacted customers who signed up for G-Link, G-Book and Connected services.
Toyota says that there’s no indication that the exposed data was accessed or misused by malicious actors. The automaker said it took steps to block outside access to the data and launched an investigation into all cloud environments managed by Toyota Connected Corp.