A major Japanese car-sharing service has been hit with a massive data breach, compromising the sensitive information of over 6.6 million current and former members. Times Car, operated by Park24 Group, revealed that an unauthorized party accessed its systems at the beginning of September, prompting swift action to contain the damage.
The breach affects not only individual users but also corporate clients who use the company’s services. An investigation into the incident has confirmed that hackers made off with a wealth of personal data, including full names, physical addresses, dates of birth, and even driver’s license information. In a worrying twist, it appears that passwords were stored in a form that can’t be easily restored, suggesting they may have been encrypted or hashed.
Fortunately for Times Car members, credit card details appear to be safe from the attackers’ grasp. However, with such sensitive data now in the wrong hands, there’s a significant risk of phishing scams and other malicious activities targeting unsuspecting victims. The company has urged its members to remain vigilant, warning against opening suspicious emails or attachments, and not typing passwords or credit card details online.
The breach is particularly noteworthy given Times Car’s size and reach. As one of Japan’s largest vehicle rental and mobility services, it boasts over 4 million active members and operates across the country’s 47 prefectures. The company has promised to notify affected customers individually, but in stages, leaving many wondering how long it will take for those impacted to receive official word.
Times Car is now conducting a thorough forensic investigation into the cause and scope of the breach, with external experts brought in to aid in the probe. As it battles to contain the fallout, the company reassured its customers that all services continue to operate normally – a reassuring message, but one that may not alleviate concerns about data security.
The incident serves as a stark reminder of the ongoing threat posed by cyberattacks and the importance of robust security measures. While Times Car’s efforts to mitigate the damage are commendable, the breach highlights the need for vigilance and preparedness in an increasingly complex digital landscape. As we navigate the ever-evolving world of cybersecurity, it’s essential to stay informed and take proactive steps to protect ourselves against data breaches like this one.
In light of this incident, users would do well to remain cautious when interacting with emails, SMS messages, or phone calls claiming to come from reputable companies like Times Car. Verifying the authenticity of such communications is crucial in preventing phishing scams and other forms of cyber exploitation. By staying alert and taking proactive measures to safeguard our data, we can minimize the impact of breaches like this one and ensure a safer online experience for all.
Source: Bleeping Computer — 2026-09-28