Unprotected VW Data Exposed Locations Of 800,000 EVs
There’s no indication anyone nefarious accessed the information before VW software provider Cariad patched the vulnerability.
A security oversight by software company Cariad left the location data of 800,000 VW Group electric cars in Europe exposed on the open internet for several months, a new report claims. A whistleblower informed Spiegel, a German news outlet, and a European hacker association of the vulnerability, which linked the information with other personal details such as an owner’s name.
The security hole allowed the publication to track the location of two German politicians with alarming precision, with the data placing a member of the German Defense Committee at his father’s retirement home and at the country’s military barracks. Spiegel also profiled a mayor, with her car collecting her movements from the town hall where she worked to her physical therapist. It found data for cars from Volkswagen, Audi, SEAT, and Skoda, alongside incredibly detailed data bout VW ID.3 and ID.4 owners.
The publication said it found several terabytes of data accessible on Amazon cloud storage, including the precise location of 460,000 vehicles that could allow it to draw conclusions about the lives of those who own the vehicles. It found information about the Hamburg police department’s 35 electric cars in its fleet, other politicians, business leaders, employees of the Federal Intelligent Services, and drivers to the United States Air Force’s Ramstein Air Base.
The hacker group, the Chaos Computer Club, informed Cariad about the vulnerability, which quickly patched the issue. Cariad told Spiegel that the vulnerability was a “misconfiguration” and that the company doesn’t merge data that would allow someone to create a profile about a person. According to the company, the researchers had to combine different data sets by “bypassing several security mechanisms.” It also said it's unaware of anyone accessing the data other than CCC.
Security Matters:
Sources: Spiegel, Chaos Computer Club
RECOMMENDED FOR YOU
BMW's Electric Cars Are Helping Keep Its V8s Alive
Modern Cars Are Packed With Sensors. What Do They All Do?
Hyundai Says The Biggest Challenge For Hydrogen Cars Is Finding Customers
Used EV Prices Were Plummeting. Now They're More Expensive Than Gas Cars
Toyota And Waymo Join Forces To Launch Driverless bZ4X Fleet In 2027
Nissan Built Three Awesome Off-Road Rigs For SEMA
Volkswagen Will Take China-Developed Technology Global In Major Strategy Shift