GoKawiilTimes Car breach exposed data of 6.6 million car-sharing accounts
Times Car, Japan's major vehicle rental service, confirmed that a cyberattack in early September compromised roughly 6.6 million current and former member accounts, including corporate Times Business Service users. The company disclosed the intrusion on September 25 and blocked unauthorized access the next day, then confirmed today that attackers accessed personal data including names, addresses, birth dates, driver's license details, verification document images, and account passwords.
GoKawiil's interpretation of the reporting above, not reported fact.
The exposure of driver's license images and identity verification documents alongside contact details creates strong potential for identity theft and targeted phishing against millions of users, even though Times Car says passwords were stored irreversibly and credit card data was untouched. The company's warning about fraudulent emails and calls suggests it anticipates attackers may exploit the stolen data for social engineering, though there is currently no evidence the data has been leaked online.
- 6.6 million Times Car and Times Business Service accounts were affected by the breach.
- Stolen data includes addresses, birth dates, driver's license info, ID document images, and passwords.
- Credit card data was not compromised, and no leaked data has surfaced online so far.
YubiKey 5C NFC Security Key — With millions of Times Car accounts exposed including passwords and ID documents, this is a good moment to lock down your most important accounts with hardware-based two-factor authentication. A YubiKey adds a physical security layer so stolen passwords alone can't be used to hijack your email, banking, or other linked accounts. It's a simple, durable way to take real control of your account security after a breach like this.
See YubiKey 5C NFC Security Key on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: bleepingcomputer.com, 2026-09-28
Published there as: “Times Car confirms data breach affecting 6.6 million user accounts”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.