Times Car says breach exposed data tied to about 6.6 million accounts

Identity-verification data for current and former members

BleepingComputer reported that Times Car said a third party accessed its systems early in the month and that the company blocked the unauthorized access on September 26. The company later said the intrusion affected approximately 6.6 million current and former members.

Reportedly exposed data includes corporate members’ department names, driver’s-license information, and identity-verification documents such as driver’s-license images. Times Car said credit-card information was unaffected and that it had no evidence the stolen data had been distributed online.

When it disclosed the incident on September 25, Times Car said it was investigating whether members’ personal information had been accessed.

Times Car’s update reportedly confirms theft of personal data affecting about 6.6 million current and former members, including members of its Times Business Service corporate program.

Card data and evidence of online distribution

The reported confirmation turns an investigation into a stated data-theft incident involving millions of present and former users of a major Japanese mobility service. The company also warned members to be cautious of messages or calls impersonating Times Car.