Toyota confirms third-party data breach impacting customers

Toyota confirmed that sensitive data allegedly stolen from a third-party entity was posted by the threat actor ZeroSevenGroup, who claims a 240GB dump containing employee and customer information, contracts, financial data, and network credentials (collected with ADRecon). Toyota says its North American systems were not compromised and has not disclosed the breached third-party or the scope of impacted individuals; the report references prior Toyota-related incidents including a Medusa ransomware event and multiple cloud misconfigurations.