I'm curious if the breach is from the German core Cariad or the Swedish subsidiary/joint-venture, WirelessCar?

Based on what sort of data was exposed, it seems plausible that it is one of the services from WirelessCar.