Customer data of Toyota was exposed in a third-party data breach after a hacker leaked an archive of 240GB of stolen data on a hacking forum. Officials of Toyota declined to share the name of the breached third-party entity.

ZeroSevenGroup - the threat actor who leaked the stolen data, claimed that they had breached an American branch of Toyota and were able to steal 240GB of files with information on Toyota employees and customers, as well as contracts and financial information. Additionally, the hackers claim to have obtained network infrastructure data, including credentials, using the open-source ADRecon tool that helps extract vast amounts of information from Active Directory environments. Read more about this story on our LinkedIn page