Black & White Path

Jul 13, 2026 · Information Security

Toyota's GitHub Repo Leak Exposes API Key, Leaving Nearly 300K User Records Unprotected

Security researchers discovered that a subcontractor accidentally pushed Toyota's T‑Connect source code with a hard‑coded database access key to a public GitHub repository, exposing roughly 296,000 customer IDs and emails for almost five years before the breach was finally detected in September 2022.