AccidentalFinancial ServicesFinanceMisdeliveryCustomer Data InvolvedIdentity (basic)Financial accountLowResolved

TOYOTA MOTOR CREDIT CORPORATION

bd_ee258d968ff79a80 · schema v1 · pii pii-v1

Severity

Low

Discovered

Aug 5, 2015

Filed

Dec 11, 2015

To disclose

18 weeks

Affected

39state residents only

Linked

2 filings

Confidence

65%

Full breach record for TOYOTA MOTOR CREDIT CORPORATION →20 incidents on file

Toyota Motor Credit Corporation notified Montana residents of a data security incident on August 5, 2015, where an unencrypted email containing customer PII and financial account details was mistakenly sent to a vendor partner. The vendor confirmed deletion of the email. No evidence of interception was found. Affected individuals were offered one year of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 18 weeks / 128 days

Aug 5, 2015

Begins

Aug 5, 2015

Discovered

Dec 11, 2015

Filed

vs. sector median

+10 wks slower

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

California State AGbd_08d6e76fe66d31372015-12-15 · +4dVerified

Name: TOYOTA MOTOR CREDIT CORPORATION
norm: toyota motor credit

Name: TOYOTA MOTOR CREDIT CORPORATION
norm: toyota motor credit
Industry: Financial Servicesllm

Discovered: Aug 5, 2015
Breach occurred: Aug 5, 2015
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Dec 9, 2015
Affected individuals: 39state-resident count only
Data types: Identity (basic)Financial account
Attack vector: Misconfiguration
MITRE ATT&CK: T1074 Data Staged

During the incident: Offering one year of free credit monitoring through Consumerinfo.com, Inc., an Experian company
Vendor confirmed the email has been deleted
Changes made: Corrective measures are being taken to help prevent issues such as this from occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 18 weeks(128 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Montana State AGDec 11 · first · this page

California State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Toyota-Motor-Credit-Corporation.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 11, 2015
Raw hash: d7a6897afebcd2eee4d0f6bc6db5f0f66ae44f46c6f1c1c356f1fe72c609c932

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityTOYOTA MOTOR CREDIT CORPORATION

Victim entityTOYOTA MOTOR CREDIT CORPORATION

Incidentdiscovered Aug 5, 2015

Stated responseOffering one year of free credit monitoring through Consumerinfo.com, Inc., an Experian company

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov