Description: A data breach revealed by Toyota Motor Corporation exposed information on more than 2 million consumers over ten years. A misconfigured database that was open to everyone without authentication was the source of the data breach. The security breach impacted customers who used the company’s T-Connect G-Link, G-Link Lite, or G-BOOK services. Exposed records include customer names, credit card data, and phone numbers have not been compromised as they weren’t stored in the exposed database.

Description: Japanese automaker Toyota had to suspend its domestic factory operations after Kojima Industries, which supplies the plastic parts and electronic components to the company was targeted in a cyber attack. The attack resulted in a halt at its 14 plants in Japan which contribute about a third of its global production.

Description: Toyota Motor Corp. disclosed the discovery of yet another data breach, this time involving the leakage of 260,000 automobile owners' personal data over the course of two improperly setup cloud services. After revealing earlier in the month that the data of 2.15 million customers was accessible to anyone online for more than 10 years, the automaker looked into the cloud features and made this revelation. It should be assumed that all of this data was repeatedly hacked given how long it was available. Information about customers, including names, contact information (including phone and email addresses), and vehicle identification numbers, may have been externally available.

Description: Toyota was affected by a cyber-attack by an unauthorized access from a third party. Toyota subsidiary Auto Parts Manufacturing Mississippi has revealed a ransomware attack where some financial and customer data was stolen and leaked, which is a strategy used by ransomware vendors to increase the leverage with which they can demand payment.

Description: In June 2025, the Qilin ransomware group targeted an automotive manufacturer, highlighting a strategic shift toward high-impact targets. The attack methodology demonstrated expertise in identifying vulnerabilities within interconnected systems, focusing on entities critical to global supply chains. This sophisticated approach compromised essential nodes, triggering widespread operational disruptions. The group's technical prowess, incorporating advanced reconnaissance and persistent access mechanisms, ensured prolonged network infiltration, rendering initial detection and remediation attempts ineffective.