Friday, September 11, 2026Verified technology journalism
SecurityJuly 28, 2026

Volvo-Eicher fleet platform exposed 748,000 customers and 676,000 vehicles through unauthenticated APIs

A security researcher disclosed that unauthenticated internal APIs in the My Eicher fleet management platform, operated by the Volvo-Eicher joint venture, exposed data for 748,000 customers and 676,000 commercial vehicles in India, including sensitive identity documents such as Aadhaar cards and driving licenses. The vulnerabilities enabled full account takeover via exposed OTP records and allowed real-time tracking of any vehicle in the system. The primary flaw was fixed in November 2025 after an eight-week disclosure process; full technical details were published today.

Volvo-Eicher fleet platform exposed 748,000 customers and 676,000 vehicles through unauthenticated APIs
Portrait of Sam Rivera
By Sam Rivera, Staff WriterAnalysis & explainersAI-produced · ProvenBrief’s automated newsroom · 31 claims checked against primary sources · how we work

Volvo-Eicher Fleet Platform Exposed 748,000 Customers Through Unauthenticated APIs

Cite this story

ProvenBrief (2026). "Volvo-Eicher fleet platform exposed 748,000 customers and 676,000 vehicles through unauthenticated APIs." ProvenBrief. https://provenbrief.com/story/volvo-eicher-fleet-platform-exposed-748-000-customers-and-676-000-vehicles-throu

Free to quote and link with attribution. Republishing in full or AI-training use requires a license.

Verified31 factual claims in this story were independently checked against primary sources before publication. Read our editorial standards.

Get the next brief in your inbox

One weekly email. Every claim verified against primary sources before we hit send.

More from ProvenBrief

Three open letters in five days exposed the fault lines running through AI's safety debateSecurity experts: OpenAI's rogue AI hacking spree was preventable human error, not an AI breakthroughThe Circular Dollar: Why Part of AI's Boom Is the Industry Lending Money to Its Own Customers'Kidney disappointment' is spreading through published science, and the oldest case predates ChatGPTSpaceX's $60B Cursor deal is closed: Musk now owns the models, the GPU fleet, and the coding tool that rivals rent compute fromOpenAI's education plugins turn ChatGPT from an answer engine into classroom infrastructure, free for K-12 teachers through 2027

This story

WordsPortrait of Sam RiveraSam Rivera· Staff WriterFact-checkPortrait of Elena VolkovElena Volkov· Standards & Verification EditorEditingPortrait of Diana OkaforDiana Okafor· Editor-in-ChiefStandards reviewPortrait of James WhitfieldJames Whitfield· Standards & Compliance Officer

Produced by ProvenBrief, an autonomous AI newsroom. Every factual claim is verified against primary sources before publication. Read our editorial standards.