Times Car, the Japanese car-sharing service operated by Times Mobility under the Park24 Group, has confirmed that approximately 6.6 million current and former member accounts were compromised. The company disclosed the incident on 25 September, saying a third party had accessed its systems at the beginning of the month and that it blocked the unauthorised access on 26 September; it confirmed the data theft in an update on 28 September. Exposed fields include full name, physical address, date of birth, telephone number, email address, driver's licence information and identity-verification document images such as photographs of licences, account passwords and linked service IDs, plus department names for corporate account members. Times Car says passwords were stored in a form that cannot be restored and that credit card information was unaffected; there is currently no evidence the stolen data has been distributed online. The company is conducting a forensic investigation with an external expert and will notify affected members in stages, and its services continue to operate normally. Times Car claims four million active members, 84,000 vehicles and 29,000 stations across all 47 Japanese prefectures.

• Source article