The automaker said that a human mistake led to a misconfiguration within its cloud-based Connected services that also may have exposed video captured by an external onboard camera.
The location data and video were potentially accessible from November 2013 and November 2015, respectively, until April.