Original Release Date: 12/30/2019
Security Discovery researcher Bob Diachenko discovered an open and unprotected Elasticsearch cluster on December 11, 2019 containing personally identifiable information (PII) of Honda customers. The database contained an estimated 26,000 Honda North America vehicle owner records including full name, email address, phone number, mailing address, vehicle information, and service maintenance information. Honda secured the server within hours after the initial notification. According to Honda, no financial, credit card, or password information was exposed.