Mazda Data Breach Exposing Employee and Partner Records Via System Vulnerability

Mazda disclosed that an external actor exploited unpatched vulnerabilities in an internal warehouse management platform, gaining unauthorized access and potentially exposing 692 records containing employee, group company staff, and business partner personal data (names, corporate emails, IDs, and company affiliations). The company reported the incident to Japan’s Personal Information Protection Commission, engaged external cybersecurity specialists, applied patches, restricted network exposure, tightened access controls, and warned affected individuals about increased phishing and BEC risk.