Honda Exposes 26,000 Records of North American Customers

guest · Dec 18, 2019

Honda Exposes 26,000 Records of North American Customers
December 18, 2019
https://www.bleepingcomputer.com/ne...s-26-000-records-of-north-american-customers/

Automotive giant Honda exposed roughly 26,000 vehicle owner records containing personally identifiable information (PII) of North American customers after misconfiguring an Elasticsearch cluster on October 21, 2019.
Honda's security team in Japan promptly secured the publicly accessible server within just a few hours after being contacted by Security Discovery researcher Bob Diachenko on December 12.
Exposed Honda vehicle owner data
The database records included the customers' full names, email addresses, phone numbers, mailing address, vehicle make and model, vehicle VINs, agreement ID, and various service information on their Honda vehicles.

"The database in question is a data logging and monitoring server for telematics services for North America covering the process for new customer enrollment as well as internal logs," Honda told Diachenko in a statement.

While the company reacted very promptly after being informed that the misconfigured Elasticsearch cluster was publicly accessible on the Internet, Diachenko says that their week-long public exposure "would have allowed malicious parties ample time to copy the data for their own purposes if they found it."
Click to expand...

Security Discovery: Honda Exposes Vehicle Owner Records on the Web

Log in or Sign up

Honda Exposes 26,000 Records of North American Customers

guest Guest

Log in or Sign up

Honda Exposes 26,000 Records of North American Customers

guest Guest

Useful Searches