Toyota suffers second data breach in five weeks
Japanese car manufacturer Toyota has suffered a second data breach in the space of five weeks, leading to the data of 3.1m customers being accessed through a malicious attack.
Toyota said that hackers breached its IT systems and gained access to information belonging to several of its sales subsidiaries.
"We take this situation seriously, and will thoroughly implement information security measures at dealers and the entire Toyota Group," said the company.
The nature of the stolen information is yet to be disclosed but Toyota assured its customers, along with Lexus car owners who are also affected, that customer financial information was not part of the breached data set.
Toyota has also not confirmed whether data on the hacked server has been exfiltrated by the hackers but the company has launched an investigation into the incident.
The nature of the data is still not entirely certain, but experts said that because the data relates to the company's sales arms, the data contained by these subsidiaries could lead to more targeted attacks on customers if the data was exfiltrated at all.
"Current and former owners of Toyota vehicles should be concerned about this breach," said Tim Mackey, senior technical evangelist at Synopsys. "With attackers potentially gaining access to sales records, that data provides a perfect profile from which to build a spear phishing attack."
"Moving forward, Toyota customers receiving any communication purporting to be from Toyota should take extra measures to confirm its legitimacy," he added.
"The ability to forensically analyze a data breach is equally as important as preventing it in the first place," said Simon Whitburn, global SVP of cyber security services at Nominet, in a statement sent to IT Pro.
"With so much at risk for customers, businesses cannot afford to play a guessing game about whether data was stolen. Monitoring data patterns at a DNS level is a good place to start, as packets could be analyzed and tracked from source to whatever server they were exfiltrated to."
In late February 2019, Toyota was hit by an "attempted cyber attack", according to a brief company announcement.
At the time, the company believed that no private employee or customer data was acquired through the attack and that the company's own IT department was managing the situation.
Following the news, analysts attributed the initial attack on Toyota to a group labelled 'APT32' or 'OceanLotus Group', a Vietnamese hacking outfit believed to be targeting the auto industry specifically. It's unknown whether the same group could be behind the most recent attack on the car manufacturer.
source itpro
Industry: Cyber Security News
Latest Jobs
-
- Public Sector Cyber Security Sales | UK
- England
- N/A
-
Public Sector Cyber Security Sales | UK UK | Remote / Hybrid A cyber security provider is seeking a Public Sector Sales professional to drive growth across UK government and public sector organisations. Must have current Cyber Security sales experience. Responsibilities Generate new business selling cyber security solutions into UK public sector Build relationships with CIO, CISO and senior technology stakeholders Manage the full sales cycle from opportunity to contract close Develop pipeline across central government, local government and public sector bodies Support bids, tenders and framework opportunities Experience Proven cyber security sales experience in the UK Track record selling into public sector organisations Familiarity with CCS, G Cloud or other government frameworks Strong stakeholder engagement and deal management skills Location UK based Security Requirements Eligible to obtain UK Security Clearance
-
- Security Architect | MoD - Security Cleared. OUTSIDE IR35 | Hampshire
- N/A
- Outside IR35
-
Security Architect | MOD | Security Cleared | Outside IR35 | Hampshire Commutable The successful candidate must be willing to undergo DV Clearance, ideally already holding active clearance. You will produce high and low level security architecture documentation, guiding and validating designs for systems deployed within sensitive environments. The role requires providing specialist security input into solution design, service transition and change initiatives, working closely with engineering, operations, client and third party stakeholders. You must have current hands on architectural experience, including VMware secure platform design and virtualisation architecture, alongside AWS expertise. This is an outside IR35 contract- 6 month rolling. Part of a longer term MoD project
-
- Active Directory | RBA engineer | UK Remote | SC Clearable
- United Kingdom
- N/A
-
Technical Active Directory (AD) and RBA specialist needed to play a key part in complex, enterprise scale Active Directory and access transformation programmes. You will work alongside senior team, helping reshape access models, modernise legacy directory structures and strengthen security posture across secure environments. This is hands on delivery within high impact projects where your work directly improves access control, compliance and operational resilience. Active UK Security Clearance required. This is a remote role with client travel. Implementation of Role Based Access Control across large AD estates Restructuring complex permission models, security groups and delegated access Supporting domain controller upgrades and core directory improvements Applying security hardening standards and remediating audit findings Enhancing authentication, policy and access governance frameworks Troubleshooting and resolving technical AD challenges within live environments Producing robust technical documentation and identifying project risks You must have the following technical experience Enterprise Active Directory administration Role Based Access and permission remediation OU design and governance Group Policy management Security group delegation models DNS and DHCP services Kerberos authentication / NTLM PowerShell scripting and automation Azure AD | Entra ID Hybrid identity environments Identity Governance PAM