A misconfigured cloud instance exposed vehicle data, but not personally identifiable information, the car maker says.