Toyota Boshoku: a vulnerability in the data exchange system of its European subsidiary was exploited and some data was stolen
On June 7 a vulnerability in the data exchange system of its European subsidiary was exploited and some data was stolen. Production and sales are not disrupted.
Disclosed
2023-06-10
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
What happened
At its European subsidiary Toyota Boshoku Europe a vulnerability in the program of the data exchange system was exploited and a third party gained access. It confirmed that some data was stolen. [1] [2]
It announced the case. It fixed the program defect in the system and took measures against similar access. It confirmed that other sites are not affected. [1] [2]
Impact
The content of the stolen data has not been disclosed. Details are under investigation, but there is no disruption to production or sales of the Toyota Boshoku group, which is operating normally. [1] [2]
Timeline
- Started, Detected 2023-06-07
- Disclosed 2023-06-10
- 3 days
Attack or cause
- Method
- [Web app exploit]
- Impact
- [Data leak]
- Entry point
- Web app
Data exposed or at risk
–
Organizations involved
[Breached][Moderate]Aichi, KariyaManufacturing
Toyota Boshoku CorporationThe access hit its European subsidiary, Toyota Boshoku Europe.
Sources
- [1][Official]子会社への不正アクセスについてToyota Boshoku Corporation · 2023-06-10
- [2][News]トヨタ紡織 欧州子会社に不正アクセス、一部データの盗取を確認ScanNetSecurity · 2023-06-16 08:05