Zum Inhalt der Seite gehen

Suche

Beiträge, die mit Volkswagen getaggt sind


Customer Data from 800,000 Electric Cars and Owners exposed Online.

Terabytes of Volkswagen customer details in Amazon cloud storage remained unprotected for months, allowing anyone with little technical knowledge to track drivers movement or gather personal information.

https://www.ccc.de/de/updates/2024/wir-wissen-wo-dein-auto-steht

#volkswagen #electric #car #amazon #cloud #cariad #exposed #data #it #security #privacy #engineer #ccc #media #technology #38c3 #news
Volkswagen’s automotive software company [Cariad], exposed data collected from around 800,000 electric cars. The info could be linked to drivers names and reveal precise vehicle locations [for some of them being as precise as a few centimeters]. The exposed databases include details for VW, Seat, Audi and Skoda vehicles.

Cariad was informed on November 26 of the issue by the Chaos Computer Club (CCC), the largest organization of ethical hackers in Europe that for more than 30 years has promoted security, privacy, and free access to information.

<https://www.ccc.de/en/>

Access to the car data was possible due to Cariad’s incorrect configuration in two IT applications, a company representative said.

The CCC hackers could access the data only after bypassing several security mechanisms that required significant time and technical expertise. Additionally, because individual vehicle data was pseudonymized for privacy purposes, the CCC hackers had to combine different data sets to associate the details with a particular user.
A Cariad representative said that the exposed data affected only vehicles connected to the internet and had been registered for online services. From the nearly 800,000 vehicles exposed, the researchers found geo-location data for 460,000 cars, for some of them with an accuracy of ten centimeters.

<https://www.carscoops.com/2024/12/vw-group-data-breach-exposed-location-info-for-800000-evs/>

Most of the affected vehicles, 300,000 of them, were in Germany but the researchers also found details about cars in Norway (80,000), Sweden (68,000), the United Kingdom (63,000), the Netherlands (61,000), France (53,000), Belgium (68,000) and Denmark (35,000).

Cariad said that its security team reacted quickly to fix the problem and closed access the same day the CCC sent them the report. CCC representatives confirmed that Cariad’s “technical team responded quickly, thoroughly and responsibly” and that the company reacted within hours of receiving the technical details.

Based on the results of its investigation, Cariad has no evidence suggesting that other parties, except the CCC hackers, had access to the exposed vehicle data or that the information had been misused by a third party.


A U.S. congressional investigation released Monday found that carmakers BMW, Jaguar Land Rover and Volkswagen had used components from a Chinese supplier banned in the United States over alleged forced labor ties. https://www.japantimes.co.jp/business/2024/05/21/us-forced-labor-automakers/ #business #bmw #jaguar #landrover #volkswagen #us #china #carmakers #uyghurs #xinjiang #forcedlabor