BMW security lapse exposed sensitive company information, researcher finds

A publicly accessible Microsoft Azure development storage bucket belonging to BMW was discovered by a researcher to contain script files, private keys for cloud services across multiple regions, and database login credentials. BMW reported it fixed the misconfiguration in early 2024 and stated no customer data was affected, but it has not confirmed rotation of the exposed keys and there is no publicly confirmed evidence of malicious access.