2021 Vendor data exposure — 3.3M (VW/Audi)
Data compromised
Email addresses, Names, Addresses, Phone numbers, Social Security numbers, Dates of birth, Driver's license numbers, Vehicle identification numbers, Vehicle information
Technical writeup
Vendor left Audi/Volkswagen customer data unsecured between Aug 2019 and May 2021. Names, addresses, emails, phones, VINs, vehicle details. For ~900k: driver's license numbers, SSNs (small number), DOB, loan numbers.
Root cause
Unsecured vendor database; third-party exposure.