Toyota confirmed a data breach in August 2024 after threat actor ZeroSevenGroup posted 240 GB of data on a hacking forum. Data included employee and customer PII, contracts, financial records, network infrastructure details, and database credentials. Toyota said the breach was limited to a third-party contractor and did not affect Toyota systems broadly. Separate from the 2023 cloud misconfiguration exposing 2.15 million customers’ vehicle location data.