TOYOTA MOTOR CREDIT CORPORATION

Toyota Financial Services, Inc. reported a data breach where certain customer accounts were mistakenly linked to another customer's account due to a technical error in the account-linking feature. This misconfiguration allowed some customers to view personal data (name, address, partial SSN, account number) of other customers via the website, app, or IVR. The incident occurred on September 10, 2021. TFS investigated, de-linked affected accounts, and implemented additional safeguards. No bank account numbers or full SSNs were exposed.

Toyota Financial Services, Inc. reported a data breach where certain customer accounts were mistakenly linked to another customer's account due to a technical error in the account-linking feature. This allowed some customers to view another customer's first name, last name, address, and TFS account number via the website, app, or IVR. Social Security numbers and bank account numbers were not exposed. TFS investigated, de-linked the accounts, and is implementing additional safeguards.

Toyota Financial Services reported a data breach to the Montana Attorney General. The breach was reported on 2019-10-03. The breach occurred on 9/4/2019. 5 Montana residents were affected.

On June 28, 2016, a Toyota Financial Services associate mistakenly emailed a spreadsheet containing customer account information (account numbers, names, phone numbers, payoff amounts, and maturity dates) to her personal email account. The transmission was encrypted. Toyota Motor Credit Corporation notified affected individuals on August 15, 2016, and offered one year of free credit monitoring.

Toyota Motor Credit Corporation (TMCC) reported a security incident to the New Hampshire Attorney General on August 23, 2016. On June 28, 2016, an employee mistakenly emailed a spreadsheet containing customer information (account numbers, names, phone numbers, payoff amounts, maturity dates) to her personal email account. 85 New Hampshire residents were affected. TMCC offered one year of credit monitoring to affected customers.

On August 5, 2015, Toyota Motor Credit Corporation (TFS) sent an unencrypted email containing customer personal information — including name, TFS account number, bank account number, and bank routing number — to a vendor partner authorized to perform computer system enhancements. The vendor confirmed the email was deleted. Affected customers were offered one year of free credit monitoring through Experian.