Major Japanese Car-Sharing Service Times Car Hit by Massive Data Breach Affecting 6.6 Million Users
Times Car, a leading vehicle rental and mobility service operated by Park24 Group, has confirmed that approximately 6.6 million user accounts have been compromised in a cyberattack disclosed last week. The incident is one of the largest data breaches to hit Japan’s tech industry this year, and it highlights the importance of robust cybersecurity measures for companies handling sensitive customer information.
The breach occurred when a third-party attacker accessed Times Car’s systems at the beginning of September. Although the company took swift action to block the unauthorized access on September 26, an investigation revealed that the attackers had managed to steal a significant amount of personal data from current and former members, including corporate account holders. The exposed information includes full names, physical addresses, dates of birth, telephone numbers, email addresses, driver’s license details, and even account passwords.
The good news is that credit card information remained unaffected in the breach, suggesting that Times Car had taken adequate precautions to protect financial data. However, the theft of sensitive personal information raises concerns about potential identity theft or phishing attacks targeting affected users. It’s not uncommon for attackers to sell or trade stolen data on dark web forums, although there is currently no evidence that this has happened in this case.
Times Car operates a large business with over 4 million active members across Japan, allowing online reservations for 84,000 vehicles and collecting them from one of the 29,000 stations it operates. The company’s services continue to run as normal, but affected users are advised to be cautious about emails, SMS, or phone calls claiming to come from Times Car, and to avoid opening attachments or typing in passwords and credit card details.
As part of its investigation, Times Car is working with an external expert to determine the cause and scope of the breach. The company has assured that it will notify affected customers individually, although the notifications will be sent in stages. This incident serves as a stark reminder for companies handling sensitive data to prioritize cybersecurity and invest in robust measures to protect against such attacks.
If you’re one of the 6.6 million users impacted by this breach, take immediate action to secure your personal information. Change your account password, monitor your credit reports, and be vigilant about suspicious emails or calls claiming to come from Times Car. Remember that prevention is key – always use strong, unique passwords, enable two-factor authentication, and keep your software up-to-date to minimize the risk of falling victim to such attacks in the future.
Source: Bleeping Computer — 2026-09-28