Login data for more than half a million records tied to vehicle tracking device company SVR Tracking have leaked online, potentially exposing the personal and vehicle data of drivers and businesses using its service.
The leaked repository was first spotted by the Kromtech Security Center, which blamed a misconfigured Amazon AWS S3 bucket that was left publicly accessible for an unknown period of time for the breach. Kromtech first noticed the cache on Sept. 18, according to Gizmodo, and the bucket was closed from public access hours after the security company alerted SVR on Sept. 20.
The records included user login info like emails and passwords, along with VINs (vehicle identification numbers) and license plate numbers, data about the GPS devices, and "other data" collected by SVR Tracking about its devices, customers, and auto dealerships that do business with the company.
SEE ALSO:Equifax has been directing victims to a fake phishing site for weeksThe data was kept in a backup folder called "accounts," which contained 540,642 entries. Some of those entries were associated with multiple vehicles. Kromtech said the total number of devices exposed "could be much larger given the fact that many of the resellers or clients had large numbers of devices for tracking."
The SVR leak contained extensive vehicle location records along with account information. The company offers continuous tracking in case cars are stolen or impounded, collecting reams of GPS data.
The service records "heartbeats" (GPS location beacons) from its devices every four hours, and stores location info for everywhere a monitored car has been for as long as 120 days in the past — meaning that someone who gained access to an account's password could both track a vehicle in real time and build a detailed log of every location it has visited. They could outright steal the car, stalk its driver, or rob a home when they know a vehicle's owner is out and about.
The folder also contained 339 logs with photos and data about vehicle status and maintenance records, along with a document that provided details about 427 dealerships that use SVR's services.
SVR didn't respond directly to Kromtech, although the leaked records were blocked from public access shortly after Kromtech provided info about the leak. The company hasn't replied to our request for comment on the matter, either.
The type of constant monitoring offered by SVR is designed to give car owners some peace of mind with the knowledge that they'll always be in control of their vehicle. This type of leak, however, does the opposite, potentially handing the digital keys to cybercriminals who could've used the data for their own means.
TopicsCybersecurity
(责任编辑：百科)
Two states took big steps this week to get rid of the tampon tax
'Once Upon a Time' gave a dark twist to the 'Beauty and the Beast' we all know
Watch the teaser for the trailer for the new 'Rogue One' 'Star Wars' spinoff
The Aussie startup scene needs more commitment and less conversationTwo astronauts just installed a new parking spot on the International Space StationMan stumbles upon his phone background in real life
Life imitates tech. Or, perhaps it's the other way around.Reddit user xbshooterwas traveling near Sa
...[详细]Thailand says nevermind the drought, annual water gun fight is on
BANGKOK — Drought? What drought? Bring out the water guns!Thailand may be going through its dr
...[详细]Fitbit used in ER to determine patient treatment after seizure
Activity trackers like Fitbit are common for monitoring steps taken and distance covered, but these
...[详细]Watch the teaser for the trailer for the new 'Rogue One' 'Star Wars' spinoff
A trailer for Rogue One: A Star Wars Story, the first Star Warsspinoff movie, will be shown on ABC's
...[详细]We asked linguists if Donald Trump speaks like that on purpose
Donald Trump may do a good "drunk uncle at Thanksgiving" impersonation at his rallies, but amid all
...[详细]I went to the Pinot by Tituss launch party and had to pee the whole time
Unbreakable Kimmy Schmidt star Tituss Burgess just released a red wine calledPinot By Tituss. Since
...[详细]44 books on 44 presidents: A handsome Democratic failure
Editor's note: This is the fourteenth entry in the writer's year-long project to read one book about
...[详细]Match.com calls freckles 'imperfections,' gets suitable response
UPDATE: April 12, 2016, 2:53 p.m. BSTIn a statement emailed to Mashable, a spokesperson for Match.co
...[详细]Aly Raisman catches Simone Biles napping on a plane like a champion
Simone Biles is exhausted. She won five medals at the Summer Olympics in Rio, posed for selfies with
...[详细]Disney fans will feel the magic next week on 'Dancing with the Stars'
It's once again time for Disney week on Dancing With the Stars,and lovers of all things from the hou
...[详细]Tyler, the Creator helped Frank Ocean celebrate 'Blonde' release in a delicious way
Students told to keep skirts below the knee because of boys and male staff
