In a data breach notification letter sent to multiple car manufacturers, including BMW and Kia, the company said it had observed “irregularities” in the way one of its third-party service providers handled its data records. Individual customer dataThe company's investigation showed the service provider needlessly viewed “individual customer data,” DCS said, adding that it is now working with the company’s management to clarify what happened. Additional security measures are already in place, it added, and stressed that law enforcement and relevant data protection authorities were alerted. “They have already been informed separately.” The data that this cheeky third party viewed included names and email addresses. Individual, complete payment data, was not accessed since DCS does not store, or process, this type of information.