Toyota confirmed that his network was hacked by a hacker who stole approximately 240 GB of data from the company’s systems.

The automaker said it has reached out to those affected by the breach. However, the company has not released any information about the attack, including when it was discovered, who the thief is and how much customer data was exposed.

Toyota said that the “aware” of the situation“The issue is limited in scope and is not a system-wide problem,” the company said.

ZeroSevenGroup allegedly stole the information from Toyota, saying the data included details of Toyota employees, customers, contracts and financial information.

“We have hacked a facility in the United States of one of the largest automakers in the world (TOYOTA),” the threat actor reportedly claimed. “We are very happy to share the files with you here for free. Data size: 240 GB.”

The group also claimed to have collected information about the network infrastructure using an open source ADRecon tool.

“There is evidence in this breach that the threat actors targeted the company’s Active Directory, using a scraping tool to escalate their privileges, gather more credentials and information about the network with the goal of extracting massive amounts of data,” Guido Grillenmeier, chief technologist at Semperis, said in an emailed statement to Dark Reading. “I am not surprised that the attackers compromised one of Toyota’s US dealerships, given how large their footprint is with over 1,500 locations in the US and 200 global distributors.”

Toyota did not respond to a request for comment from Dark Reading.