Data breaches have become an unfortunate norm but the latest incident involving Volkswagen underscores just how vulnerable sensitive information can be. A German news outlet revealed that personal data and vehicle location information for more than 800,000 customers, including high-profile German figures, was freely accessible since mid-2024 due to poor security practices.
The breach originated from VW’s car app, developed by its subsidiary Cariad, which stored customer charging data on Amazon Web Services (AWS). A lack of encryption and inadequate security protocols left sensitive data—including email addresses, home addresses, and phone numbers—exposed. Shockingly, one file even contained login credentials to VW’s Amazon cloud account, granting potential access to a treasure trove of customer information.
The leak affected multiple Volkswagen Group brands, including Audi, Seat, and Skoda. For the Volkswagen and Seat models, geolocation data was accurate within 10 centimetres, while the Audi and Skoda models were traceable within a range of 10 kilometres.
