Toyota Industries North America is notifying 19,000 current and former employees and health plan participants about a data security incident affecting their personal and protected health information, the company said Sept. 28.
In August, Toyota discovered an unauthorized individual may have accessed its email system, affecting a small number of email accounts. The company has no evidence that data was removed from its systems in the potential breach.
Potentially compromised information includes: full name, home address, date of birth, phone number, financial account information, Social Security number, photograph of Social Security card, driver's license number, photograph of driver's license, email address, photograph of birth certificate, photograph of passport, treatment information, prescription information, diagnoses, health plan beneficiary number and portal username, password, and security questions.
As soon as the company discovered the incident, Toyota said it engaged information security experts and law enforcement to ensure the unauthorized access had been cut off. Toyota is also reviewing options to enhance its training, technology and security practices to reduce the risk of a similar incident occurring again.