Times CAR breach exposes 6.6 million accounts and 1.46 million driver's license images

Teaser from the source

Attackers exploited a vulnerability in the web system of Times CAR, the Japanese car-sharing service Park24 runs through its subsidiary Times Mobility. The intrusion was detected on Sep 25 2026. Park24's forensic report on Oct 23 says data for 6,628,007 accounts (names, addresses, birth dates, phone numbers, emails and driver's license information) shows traces of being sent out, along with 1,464,800 encrypted ID document images such as driver's licenses; another 891,602 encrypted images were accessed without signs of transmission. No credit card numbers were stored, and Park24 says it has seen no sale or publication of the data so far. It will pay affected ID-image users 3,000 yen each and is booking a 5.5 billion yen special loss.

This is the RSS-feed teaser. Read the full article at the original source.