🐻California State AGFirst filing
Filed Jun 11, 2024bd_478252a5af7af618
Toyota Financial Services, Inc. reported a data breach where certain customer accounts were mistakenly linked to another customer's account due to a technical error in the account-linking feature. This misconfiguration allowed some customers to view personal data (name, address, partial SSN, account number) of other customers via the website, app, or IVR. The incident occurred on September 10, 2021. TFS investigated, de-linked affected accounts, and implemented additional safeguards. No bank account numbers or full SSNs were exposed.