Times Car confirms data breach impacting 6.6 million user accounts

Data Breach Confirmed

Times Car, a Japanese car-sharing service, has confirmed a data breach affecting approximately 6.6 million user accounts. The company initially disclosed a cyberattack on September 25, stating that unauthorized access to its systems occurred at the beginning of the month. Times Car blocked the access on September 26.

Compromised Information

The compromised data includes full names, department names for corporate members, physical addresses, dates of birth, telephone numbers, email addresses, driver’s license information, identity verification document information (such as images of driver’s licenses), account passwords, and linked service IDs. Times Car stated that passwords were stored in a form that cannot be restored, suggesting encryption or hashing. Credit card information was not affected, and there is no evidence of the stolen data being distributed online.

Affected Users and Company Response

The breach impacts both current and former members of Times Car and the Times Business Service corporate account program. Times Car is a significant mobility service with 4 million active members as of August 2026. The company is conducting a forensic investigation with external experts and will notify affected customers in stages. All services continue to operate normally.

User Precautions

Times Car has urged its members to exercise caution regarding unsolicited emails, SMS messages, and phone calls claiming to be from the company. Users are advised to avoid opening attachments or entering passwords and credit card details in response to such communications.