Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Attacks/Breaches

Toyota Accuses Former IT Contractor Of Data Breach

Third-party IT contractor breached Toyota's systems, compromised sensitive data, automaker says

Toyota has accused a former IT contractor of stealing sensitive information from its systems.

In a complaint filed at the U.S. District Court in Kentucky, the North American branch of Toyota Motor Co. says that Ibrahimshah Shahulhameed illegally accessed one of its websites after being dismissed from his contracting job on Aug. 23.

According toindustry reports, within hours of his dismissal, Shahulhameed is accused of logging into the toyotasupplier.com website without authorization and spending hours downloading proprietary plans for parts, designs, and pricing.

Toyota uses the website to exchange highly sensitive information with its suppliers about current and future products.

If the compromised data was made public, then "it would be highly damaging to Toyota, and its suppliers, causing immediate and irreparable damage," the automaker said.

According to a report in Automotive News, Shahulhameed also has been accused of sabotaging software on Toyota's systems, causing computers to crash.

A restraining order has been placed on Shahulhameed, who is an Indian citizen, that prevents him from leaving the United States or disseminating the trade secrets.

"What isn't clear, at this time, is whether Toyota is claiming that Shahulhameed accessed their computer systems by exploiting a vulnerability, or whether they had simply not reset staff passwords that he may have had access to in his position as an IT contractor with the firm," said experts at security firm Sophos in their blogged analysis of the incident.

Have a comment on this story? Please click "Add a Comment" below. If you'd like to contact Dark Reading's editors directly, send us a message. Tim Wilson is Editor in Chief and co-founder of Dark Reading.com, UBM Tech's online community for information security professionals. He is responsible for managing the site, assigning and editing content, and writing breaking news stories. Wilson has been recognized as one ... View Full Bio

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
lsatenstein
50%
50%
lsatenstein,
User Rank: Apprentice
9/7/2012 | 2:43:08 PM
re: Toyota Accuses Former IT Contractor Of Data Breach
In the normal prevention of cyberfraud, one has the system administrator block the users account as a production job at midnight.- When the contractor shows up, you take the laptop he was given and you give him a handshake and show him the door, but first he signs papers that he has not taken away or has in his possession, any private corporate data.- Private also means confidential.

Leslie,
Cyberfraud and Encryption Specialists
ITBMS Inc.- www.itbms.biz
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: Our Endpoint Protection system is a little outdated... 
Current Issue
The Year in Security: 2019
This Tech Digest provides a wrap up and overview of the year's top cybersecurity news stories. It was a year of new twists on old threats, with fears of another WannaCry-type worm and of a possible botnet army of Wi-Fi routers. But 2019 also underscored the risk of firmware and trusted security tools harboring dangerous holes that cybercriminals and nation-state hackers could readily abuse. Read more.
Flash Poll
Rethinking Enterprise Data Defense
Rethinking Enterprise Data Defense
Frustrated with recurring intrusions and breaches, cybersecurity professionals are questioning some of the industrys conventional wisdom. Heres a look at what theyre thinking about.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2019-10694
PUBLISHED: 2019-12-12
The express install, which is the suggested way to install Puppet Enterprise, gives the user a URL at the end of the install to set the admin password. If they do not use that URL, there is an overlooked default password for the admin user. This was resolved in Puppet Enterprise 2019.0.3 and 2018.1....
CVE-2019-10695
PUBLISHED: 2019-12-12
When using the cd4pe::root_configuration task to configure a Continuous Delivery for PE installation, the root user�s username and password were exposed in the job�s Job Details pane in the PE console. These issues have been resolved in version 1.2.1 of the ...
CVE-2019-5085
PUBLISHED: 2019-12-12
An exploitable code execution vulnerability exists in the DICOM packet-parsing functionality of LEADTOOLS libltdic.so, version 20.0.2019.3.15. A specially crafted packet can cause an integer overflow, resulting in heap corruption. An attacker can send a packet to trigger this vulnerability.
CVE-2019-5090
PUBLISHED: 2019-12-12
An exploitable information disclosure vulnerability exists in the DICOM packet-parsing functionality of LEADTOOLS libltdic.so, version 20.0.2019.3.15. A specially crafted packet can cause an out-of-bounds read, resulting in information disclosure. An attacker can send a packet to trigger this vulner...
CVE-2019-5091
PUBLISHED: 2019-12-12
An exploitable denial-of-service vulnerability exists in the Dicom-packet parsing functionality of LEADTOOLS libltdic.so version 20.0.2019.3.15. A specially crafted packet can cause an infinite loop, resulting in a denial of service. An attacker can send a packet to trigger this vulnerability.