# Hacking into a Toyota/Eicher Motors insurance company by exploiting their premium calculator website

DevFeed: [Hacking into a Toyota/Eicher Motors insurance company by exploiting their premium calculator website](<https://devfeed.tech/articles/hacking-into-a-toyota-eicher-motors-insurance-company-by-exploiting-their-premium-calculator-website-32607.md>)

Original publisher: [Read original article](<https://eaton-works.com/2024/01/17/ttibi-email-hack/>)

Author: Eaton

Published: 2024-01-17T16:25:39Z

Content type: article

Language: en

Sources: [Eaton Works Feed](<https://devfeed.tech/sources/eaton-works-feed.md>)

Topics: [Hacking](<https://devfeed.tech/topics/hacking.md>), [API](<https://devfeed.tech/topics/api.md>), [Cloud](<https://devfeed.tech/topics/cloud.md>), [Microsoft](<https://devfeed.tech/topics/microsoft.md>), [passwords](<https://devfeed.tech/topics/passwords.md>), [Authentication](<https://devfeed.tech/topics/authentication.md>), [Website](<https://devfeed.tech/topics/website.md>)

Tags: [api](<https://devfeed.tech/tags/api.md>), [authentication](<https://devfeed.tech/tags/authentication.md>), [broker](<https://devfeed.tech/tags/broker.md>), [cloud](<https://devfeed.tech/tags/cloud.md>), [hacking](<https://devfeed.tech/tags/hacking.md>), [india](<https://devfeed.tech/tags/india.md>), [insurance](<https://devfeed.tech/tags/insurance.md>), [microsoft](<https://devfeed.tech/tags/microsoft.md>), [password](<https://devfeed.tech/tags/password.md>)

## AI overview

A security report describes how a vulnerable API on Toyota Tsusho Insurance Broker India's premium calculator website exposed Microsoft corporate cloud credentials. The exposed account lacked two-factor authentication and contained customer emails, insurance documents, password reset links, and OTPs. Other Microsoft cloud resources were also accessible.

## Source excerpt

A vulnerable API on Toyota Tsusho Insurance Broker India's premium calculator website exposed Microsoft corporate cloud credentials.