> JapanHacked_
[Contained][Severity: Moderate][Web app exploit]

Toyota Boshoku: a vulnerability in the data exchange system of its European subsidiary was exploited and some data was stolen

On June 7 a vulnerability in the data exchange system of its European subsidiary was exploited and some data was stolen. Production and sales are not disrupted.

Disclosed

2023-06-10

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. At its European subsidiary Toyota Boshoku Europe a vulnerability in the program of the data exchange system was exploited and a third party gained access. It confirmed that some data was stolen. [1] [2]

  2. It announced the case. It fixed the program defect in the system and took measures against similar access. It confirmed that other sites are not affected. [1] [2]

Impact

The content of the stolen data has not been disclosed. Details are under investigation, but there is no disruption to production or sales of the Toyota Boshoku group, which is operating normally. [1] [2]

Timeline

  1. Started, Detected 2023-06-07
  2. Disclosed 2023-06-10
  3. 3 days

Attack or cause

Method
[Web app exploit]
Impact
[Data leak]
Entry point
Web app

Data exposed or at risk

–

Organizations involved

Open in organization search

Sources

  1. [1][Official]子会社への不正アクセスについてToyota Boshoku Corporation · 2023-06-10
  2. [2][News]トヨタ紡織 欧州子会社に不正アクセス、一部データの盗取を確認ScanNetSecurity · 2023-06-16 08:05