Sounds more like a third party MSP for Toyota Motors NA based on the basic AD misconfigurations. It's also highly likely that Toyota Motors NA contracted out I

Sounds more like a third party MSP for Toyota Motors NA based on the basic AD misconfigurations. It's also highly likely that Toyota Motors NA contracted out IT work to said third-party, as is the norm at most non-Software companies because IT is a cost center (just like how Payroll and Accounting tends to be contracted out at Software companies). Snowflake got hit by a similar incident when Polish (edit: Ukrainian) EPAM contractors' laptops were compromised [0], leading to a massive breach org-wide and for dozens of F1000s [0] - https://techcrunch.com/2024/06/05/snowflake-customer-passwords-found-online-infostealing-malware/?guccounter=1 https://techcrunch.com/2024/06/05/snowflake-customer-passwor...