The S3 bucket contained details of roughly 540,000 SVR accounts, including email addresses and passwords, as well as users’ vehicle data, such as VIN (vehicle identification number) and the IMEI numbers of GPS devices. The exposed archive also includes information where the tracking device was hidden in the car.

Read full news article on Security Affairs