Times Car Data Breach: Affecting Millions of Users
Overview of the Incident
Japanese car-sharing service Times Car has confirmed that approximately 6.6 million user accounts were compromised in a cyberattack disclosed late last week. The company announced the incident on September 25, stating that a third party had accessed its systems at the beginning of the month. Times Car took action to block the unauthorized access on September 26.
Details of the Breach
At the time, the company said it was investigating whether the attackers accessed members' personal information, but confirmed the data theft in an update earlier today. The company says that the intrusion affects 6.6 million current and former Times Car members, and also current and former members of the Times Business Service corporate account program. According to the update, exposed information includes the following data:
- Department name for corporate members
- Identity verification document information, such as images of driver’s licenses
The company said that passwords were stored in a form that cannot be restored, suggesting they were encrypted or hashed, although it did not provide additional details. The investigation confirmed that credit card information remained unaffected. Currently, there is no evidence that the stolen data has been distributed online.
Company Response and Recommendations
Times Car is a major vehicle rental and mobility service operated by Times Mobility, part of the Park24 Group. The company urged members to be cautious about emails, SMS, and phone calls claiming to come from Times Car, and to avoid opening attachments or typing passwords and credit card details. The firm is now conducting a forensic investigation into the cause and scope of the incident with the help of an external expert.
Related Cybersecurity Incidents
- Iris Ohyama data cloud breach exposes info of 7.7 million customers
- Sony ISP subsidiary data breach exposes 2.5 million customer records
- Nippon Columbia malware incident exposes 8.6 million karaoke fan records
- DreamHost confirms data breach exposed FTP logins and webmail sessions
- WorkOS says attacker used ARTEX AI to breach internal sales app
- OpenAI's new GPT-6 Cyber AI finds 81 Firefox flaws, 948 Linux bugs
- QNAP says hackers breaching NAS devices in Plex2Shell attacks
- SonicWall warns of new SSL-VPN MFA bypass flaw exploited in attacks
- Overdue a password health-check? Audit your Active Directory for free
Adaptive Security's AI Solutions
Uncover email threats your existing defenses may miss. Adaptive Security's AI agents analyze email intent, context, and behavior to uncover phishing, business email compromise, and invoice fraud. See what's getting through with a 14-day read-only scan of Microsoft 365 or Google Workspace, with no MX changes.
Join Our Community Edition
Monitor, analyze, and promptly mitigate risks across your external digital landscape with the CTM360. Join our Community Edition to get started.
Your Carrier Tracks You. We Don’t.
Switch to Cape, America’s Privacy-first Mobile Carrier. Your carrier tracks you. We don’t. Switch to Cape, America’s Privacy-first Mobile Carrier.
Workspace Risk Index
Find out what your employees are doing with AI by using the Workspace Risk Index. Your employees already connected AI to Gmail and Drive. Find out what it can read in the Workspace Risk Index.
CTM360 Community Edition
Join our Community Edition to get started. Monitor, analyze, and promptly mitigate risks across your external digital landscape with the CTM360.
Comments