Now on Demand Ransomware Resilience & Recovery Summit - All Sessions Available
Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Tracking & Law Enforcement

Toyota Says Fired Contractor Sabotaged Supplier Network and Stole Sensitive Data

Court documents obtained by SecurityWeek, from the Eastern District of Kentucky, show that Toyota has filed a lawsuit against an ex-contractor for sabotaging the company’s supplier network and downloading confidential information.

Court documents obtained by SecurityWeek, from the Eastern District of Kentucky, show that Toyota has filed a lawsuit against an ex-contractor for sabotaging the company’s supplier network and downloading confidential information.

Toyota accuses Ibrahimshah Shahulhameed, a former employee who was working for the automaker in Kentucky, of accessing their supplier network after he was fired, sabotaging the network itself and downloading sensitive information. According to documents filed with the court, Shahulhameed was fired last week, August 23, but the company did not state why.

The day he was terminated, from midnight until approximately 06:30 a.m. on August 24, Shahulhameed “sabotaged various programs and applications; and accessed, copied, downloaded and/or disseminated trade secrets and proprietary information.”

“Specifically, due to the level of administrative access [Shahulhameed] had to Toyota’s system, [Shahulhameed] improperly accessed proprietary trade secrets and information such as pricing information, quality testing data, and parts testing data,” Toyoda said in the complaint.

“Based on information currently available, [Shahulhameed] logged on to various internal and external systems and programs that contain highly confidential and proprietary information of Toyota…If this information were disseminated to competitors or otherwise made public, it would be highly damaging to Toyota, and its suppliers, causing immediate and irreparable damage.”

Further, the automaker charges Shahulhameed with modifying 13 applications on toyotasupplier.com causing it to crash.

“At this point, the level of damage caused by [Shahulhameed’s] unauthorized access to Toyota’s computer system is unknown. It will take days for Toyota’s IT department to determine the full extent of its damage as a result of [Shahulhameed’s] efforts to sabotage its system,” the complaint explains.

As it turns out, Toyota almost lost their chance to confront Shahulhameed in court. After he was released on bond, he told corporate investigators that he was planning on returning home to India (he is in the U.S. on an H1B visa). The automaker asked the court for a temporary restraining order preventing him from leaving, but it wasn’t needed as he agreed to an order on Monday that he would not travel for 14 days.

Advertisement. Scroll to continue reading.

Shahulhameed remains free on a $2,500 bond until trial.

Written By

Click to comment

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join the session as we discuss the challenges and best practices for cybersecurity leaders managing cloud identities.

Register

SecurityWeek’s Ransomware Resilience and Recovery Summit helps businesses to plan, prepare, and recover from a ransomware incident.

Register

People on the Move

Bill Dunnion has joined telecommunications giant Mitel as Chief Information Security Officer.

MSSP Dataprise has appointed Nima Khamooshi as Vice President of Cybersecurity.

Backup and recovery firm Keepit has hired Kim Larsen as CISO.

More People On The Move

Expert Insights

Related Content

Cybercrime

Daniel Kelley was just 18 years old when he was arrested and charged on thirty counts – most infamously for the 2015 hack of...

Cybercrime

No one combatting cybercrime knows everything, but everyone in the battle has some intelligence to contribute to the larger knowledge base.

Cybercrime

The FBI dismantled the network of the prolific Hive ransomware gang and seized infrastructure in Los Angeles that was used for the operation.

Ransomware

The Hive ransomware website has been seized as part of an operation that involved law enforcement in 10 countries.

Privacy

Employees of Chinese tech giant ByteDance improperly accessed data from social media platform TikTok to track journalists in a bid to identify the source...

CISO Strategy

The SEC filed charges against SolarWinds and its CISO over misleading investors about its cybersecurity practices and known risks.

Cybercrime

A global cyber espionage campaign has resulted in the networks of many organizations around the world becoming compromised after the attackers managed to breach...

Cybercrime

A look into recent cryptocurrency tracing and recovery operations by the FBI and UK’s Metropolitan Police