News

Toyota suffers massive data leak; 2.6 lakh customers affected

Personal information of unknown number of customers in Asia, except Japan, was exposed between October 2016 and May 2023.

Last month, Toyota admitted to a data breach of nearly 2.15 million customers. Now, another incident has come to light, in which, data of around 2.6 lakh car owners was exposed to the internet for a decade.

The exposed data set included information such as in-vehicle terminal ID, chassis number, vehicle location information and time.

According to Toyota, the data was "potentially accessible externally due to a misconfiguration" of its cloud servers. It is said that the incident was caused by insufficient dissemination and enforcement of data handling rules. Since the last announcement, Toyota claims to have implemented a system to monitor cloud configurations.

Toyota also confirmed that the personal information of an unknown number of customers in Asia, except Japan, was exposed between October 2016 and May 2023.

The company has issued a public apology for the inconvenience caused to all parties by this data breach.

Source: ET Auto

 

News

Tesla Model 3's infotainment unit hacked in minutes in competition

The competition had the Tesla security team on-site, who confirmed the hack.

According to reports, Synactiv - a French cybersecurity company, recently won a hacking competition wherein the team was able to breach the infotainment system of a Tesla Model 3 within minutes.

The team from the French company took less than 2 minutes to hack into the car and gain access to the vehicle gateway and infotainment subsystems. However, they avoided hacking the car itself due to safety reasons, and to prevent any unintentional movement during the competition. The team from Synactiv was able to access the car's infotainment and replace the Tesla logo with their own. They also hacked the Model 3's Gateway system, which manages the connection between the car and the Tesla Powerwall.

In a separate hack, the team was able to access the car via an Ethernet network, which allowed them to open the vehicle's boot and doors while it was in motion.

The competition had the Tesla security team on-site, who confirmed the hack. The automaker said it would issue a patch for the vulnerability via an over-the-air update soon.

The Synactiv team who won the hacking competition won a Tesla Model 3 and a prize amount of US$ 3,50,000.

Source: Autoblog

 
Live To Drive