Toyota confirms customer and employee data stolen, says breach at third party to blame

Last week, an actor using the handle ZeroSevenGroup published a 240GB data dump on BreachForums claiming it originated from Toyota's U.S. branch and included customer, employee, financial, and infrastructure-related files; Toyota attributed the theft to a breach at a third party, said the incident was limited in scope, and notified impacted individuals. The article cites BleepingComputer's review (files dated Dec 25, 2022) and offers guidance for individuals to change passwords, enable 2FA, and monitor identity exposure; no technical indicators or active exploitation details are provided.