BYOD Ransomware Group Claims Breach of Toyota
The BYOD ransomware group has added Toyota to its data leak site. The post is marked “PSA” and was last updated on November 10, 2026.
According to the listing, the stolen data includes:
- Full names
- Email addresses
- Physical addresses
- Phone numbers
- Dates of birth
- Kiosk device data
In an unusual remark, the group says that “a lot was actually isolated.” This suggests Toyota’s defenses contained much of the intrusion, but the attackers claim they found “a few cracks” to get through. The post also points Toyota to the group’s contact page, a common way to pressure a victim into ransom negotiations.
We have not independently verified the authenticity or volume of the data, and no samples have been published so far. We found no public statement from Toyota about this claim at the time of writing. Ransomware groups sometimes exaggerate or make up claims, so this should be treated as unconfirmed.
This would not be Toyota’s first serious cyber incident. In December 2023, Toyota Financial Services warned customers of a data breach after a Medusa ransomware attack on its European and African divisions. In May 2023, it disclosed that a cloud database misconfiguration had exposed the car-location information of 2,150,000 customers over ten years. Toyota later confirmed an incident in which a hacker published a 240 GB archive of stolen data on a hacker forum. Toyota said that leak came from a third-party provider, not its own systems.
Potential risks
If the claim is genuine, the personal data listed could be used for targeted phishing, identity fraud, and social engineering against Toyota customers. Compromised kiosk devices could also point to weaknesses in dealership or customer-facing infrastructure.
Recommendations
- Toyota customers should watch out for unsolicited emails, texts, or calls claiming to be from Toyota or its dealerships.
- Do not share personal or payment details in response to unexpected requests.
We will update this post as more information becomes available.
