Times Car Data Breach
Times Mobility, a subsidiary of Park24 Group and operator of Japan's premier car-sharing service Times Car, disclosed a major cybersecurity breach following unauthorized third-party access to its web management systems.
Exposed Data Types
8- Names
- Physical addresses
- Dates of birth
- Phone numbers
- Email addresses
- Passwords
- Driver's licenses
- Identity documents
About This Breach
Detected on September 25, 2026, the incident compromised approximately 6.6 million member accounts. Leaked data includes full customer names, physical addresses, dates of birth, phone numbers, email addresses, hashed passwords, and driver's license numbers. Crucially, approximately 1.6 million uploaded identity verification images (such as driver's licenses, student cards, and utility bills used for eKYC compliance) were exposed. Credit card and banking records remained unaffected.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
