2026 Times Car (Park24) — ~6.6M member accounts; names, addresses, license images
Data compromised
Per Park24 Sep 28 update: name; corporate department; address; DOB; phone; email; driver’s license information; identity-document images (e.g. license photos); passwords stored in non-restorable form; linked service IDs (e.g. WESTER ID and other partner IDs). Credit cards not leaked. ~6.6M current/former Times Car and Times Business Service accounts.
Technical writeup
Verified company notice — Park24 Group (Times Mobility / Times Car) Sep 28, 2026 second report: unauthorized access to Times Car Web systems detected Sep 25 ~09:07 JST; access path blocked by Sep 26 ~07:25. Investigation confirmed acquisition of ~6.6 million current and former Times Car and Times Business Service member accounts. Fields include names, addresses, DOB, phones, emails, driver’s license data and ID-document images, hashed/non-restorable passwords, and linked service IDs. Credit card data not involved; no confirmed public dump or misuse at indexing. Forensic work and Personal Information Protection Commission / police reporting ongoing. recordsAffected 6600000; companyConfirmed true.
Root cause
Unauthorized access to Times Car Web systems early September 2026; path blocked by Sep 26 (Park24 notice).