Vehicle locating service provider exposed over 500k customer's personal information due to misconfigured cloud server

Synopsis

In September 2017, the company that gives auto dealerships and lot owners the ability to locate and recover vehicles, allowed more than half a million customer records to be leaked online via an unsecured Amazon S3 bucket.

It is unknown how long the information was publicly available and the data was quite sensitive in nature including email addresses, passwords, license plate numbers, VINs and the ability to see every location a vehicle had been in the previous 6 months.

The company responded quickly after discovery, impressively securing the bucket within three hours.

Speak to the analyst

Want to discuss this case? We're offering a FREE 20 minute phone consultation to discuss this case and the implications it has for your organisation. Just select the time and date that works for you:

Analyst

Courtenay Brammar

Experienced global enterprise risk and governance professional. Previously Vice President at Morgan Stanley, Deloitte Risk Advisory practitioner and PRMIA steering committee member in both London and New York.

Additional services

We offer a range of cost-effective, fixed-price training programmes and consultant services derived from the unique insights gained from all our case study data.

If you'd rather we did the heavy lifting in developing a cyber incident response plan or lessons learnt training for your organisation underpined by our unique insight into the challenges faced and strategies implemented by organisations countering today's cyber security threats then please contact us here.