Times Car confirms data breach affecting 6.6 million user accounts

Japanese car-sharing service Times Car has confirmed a significant data breach affecting approximately 6.6 million user accounts, a disclosure made late last week. The cyberattack, which the company states occurred on December 6, 2023, potentially exposed a range of personal information belonging to its users. The compromised data includes sensitive details such as users' names, addresses, phone numbers, and email addresses. Critically, in some instances, driver's license numbers were also compromised. Times Car has explicitly stated that financial information, including credit card details, was not affected by this incident. This is because such sensitive financial data is managed by a third-party payment processor and is not stored on Times Car's own systems, thereby creating a layer of separation for that specific data type.

In the wake of this security incident, Times Car has launched a comprehensive internal investigation to ascertain the full extent of the breach and its potential ramifications. The company is also actively cooperating with relevant Japanese authorities to address the situation. As part of its response, Times Car has commenced the process of notifying all affected users. This notification is being delivered through both email and postal mail, providing individuals with detailed information about the breach and offering guidance on how to protect themselves from potential misuse of their compromised personal information. This guidance includes recommendations for closely monitoring financial accounts for any suspicious activity and maintaining vigilance against phishing attempts, which often leverage stolen personal data.

To further support its customers, Times Car has established a dedicated inquiry line and a specific website to disseminate additional information and provide ongoing assistance. The company has reiterated its commitment to data security and is in the process of implementing enhanced security measures designed to prevent similar incidents from occurring in the future. The scale of this breach, impacting 6.6 million accounts, is particularly noteworthy given Times Car's substantial operational footprint across Japan. Times Car operates an extensive network of car-sharing vehicles throughout Japan, serving a broad and diverse customer base. The compromise of driver's license numbers is a significant concern, as this type of personally identifiable information is a prime target for identity theft, potentially leading to more severe consequences for affected individuals. The company's proactive communication strategy and the provision of support resources are crucial steps in mitigating the immediate damage and working towards rebuilding customer trust following this substantial data compromise.