Classic Cars Reveal Secrets by Retaining Untouched Data

Data Breach Incident: Research engineer Romain Marchand from Quarks Lab discovered a telematic control unit (TCU) from a salvage yard in Poland, which contained sensitive, unencrypted data including system configurations and GPS logs.

Sensitive Information Exposure: The non-volatile storage of the TCU held sensitive information that could be exploited, revealing the vehicle's GPS positions over time, which raised concerns about data security.

Global Navigation Satellite System (GNSS) Logs: The TCU's logs documented the vehicle's journey from a factory in China to its operational life in the UK, culminating in its wrecking in Poland, highlighting the potential for tracking vehicles through their data.

Broader Implications: Marchand noted that the hardware architecture of the TCU is similar to those found in other brands, indicating that the issue of unencrypted sensitive data is not limited to BYD vehicles alone.