Volkswagen car-location data-exposure incident: Difference between revisions
m Proofreading |
m add category |
||
| (3 intermediate revisions by 2 users not shown) | |||
| Line 4: | Line 4: | ||
|priority=high | |priority=high | ||
}} | }} | ||
''Note: This article represents an ongoing situation and may be updated as more information becomes available.'' | |||
In 2024, Volkswagen experienced a data-security incident involving customer vehicle information stored on [[Amazon Web Services]] (AWS). The incident occurred when Volkswagen's implementation of [[CARIAD]], a system used for storing terabytes of customer data, was discovered to have publicly accessible storage instances, because of a misconfiguration<ref name=":0">[https://cybersecuritynews.com/volkswagen-data-breach/]"Volkswagen Data Breach: 800,000 Electric Car Owners’ Data Leaked" written by Guru Baran (co-founder of Cyber Security News and GBHackers On Security). [https://archive.ph/tVDzM Archived] from the original on December 28, 2024. Retrieved on January 15, 2025.</ref>. | In 2024, Volkswagen experienced a data-security incident involving customer vehicle information stored on [[Amazon Web Services]] (AWS). The incident occurred when Volkswagen's implementation of [[CARIAD]], a system used for storing terabytes of customer data, was discovered to have publicly accessible storage instances, because of a misconfiguration<ref name=":0">[https://cybersecuritynews.com/volkswagen-data-breach/]"Volkswagen Data Breach: 800,000 Electric Car Owners’ Data Leaked" written by Guru Baran (co-founder of Cyber Security News and GBHackers On Security). [https://archive.ph/tVDzM Archived] from the original on December 28, 2024. Retrieved on January 15, 2025.</ref>. | ||
==Background== | ==Background== | ||
| Line 20: | Line 23: | ||
==Regulatory response== | ==Regulatory response== | ||
The National Highway Traffic Safety Administration (NHTSA) has previously expressed concerns about automotive data security. Following the 2020 Massachusetts Right to Repair initiative, NHTSA official Carrie Gules issued a letter addressing potential security vulnerabilities in vehicle data systems. | The National Highway Traffic Safety Administration (NHTSA) has previously expressed concerns about automotive data security. Following the 2020 Massachusetts Right to Repair initiative, NHTSA official Carrie Gules issued a letter addressing potential security vulnerabilities in vehicle data systems.<ref>https://www.nhtsa.gov/sites/nhtsa.gov/files/documents/vehicle_cybersecurity_best_practices_01072021.pdf. [https://web.archive.org/web/20210720041841/https://www.nhtsa.gov/sites/nhtsa.gov/files/documents/vehicle_cybersecurity_best_practices_01072021.pdf Archived] from the original on July 20, 2021. Retrieved January 27, 2025.</ref><!-- I couldn't find any specific letter that was referenced here, although there have been some sources saying that the NHTSA has taken part in Massachusetts Right to Repair regulations. --> | ||
==Broader implications== | ==Broader implications== | ||
| Line 37: | Line 40: | ||
*Drive times | *Drive times | ||
==See | ==See also== | ||
*Data privacy | *Data privacy | ||
*[[Right to repair]] | *[[Right to repair]] | ||
| Line 43: | Line 46: | ||
*[[Volkswagen]] | *[[Volkswagen]] | ||
*[[2020 Massachusetts Right to Repair ballot initiative]] | *[[2020 Massachusetts Right to Repair ballot initiative]] | ||
*[[General Motors data | *[[General Motors data collection and sharing controversy]] | ||
==References== | ==References== | ||
<references /> | <references /> | ||
<!-- commenting out to granular categories for the moment --> | <!-- commenting out to granular categories for the moment --> | ||
[[Category:Data breaches]] | [[Category:Data breaches]] | ||
| Line 61: | Line 63: | ||
[[Category:CARIAD]] | [[Category:CARIAD]] | ||
[[Category:Incidents]] | [[Category:Incidents]] | ||
[[Category:Articles based on videos]] | |||