Short answer
Times Mobility detected unauthorized access to the Times Car web system on 25 September 2026 and said on 28 September that about 6.6 million accounts' member data had been taken. ScanNetSecurity reports about 1.6 million of those involved identity document images, and the company later changed how long it keeps such images.
If you think your details were included, start with our checklist on what to do after a data breach.
Key facts
| Organization | Times Mobility (Park24 Group), Times Car |
|---|---|
| Incident type | Data breach |
| Status | Confirmed by the organization |
| Sector | Car sharing and mobility |
| Country | Japan |
| Detected | 2026-09-25 |
| Disclosed | 2026-09-28 |
| People or records affected | About 6.6 million Times Car accounts, including former members and unfinished applications. About 1.6 million involved identity document images, as reported by ScanNetSecurity. |
What data was exposed
- Names, addresses, dates of birth, phone numbers and email addresses
- Driver's license information and images of identity documents such as driver's licenses
- Corporate members' department names
- Passwords stored in a form that cannot be reversed
- IDs of linked services, such as JR West's WESTER ID
What happened
Times Mobility, a Park24 Group company that runs the Times Car sharing service, detected unauthorized access to the Times Car web system at 9:07 a.m. on 25 September 2026, according to its second report. It blocked the access route at 7:25 a.m. the next day and cut communication with the attacker. A third party had obtained some stored member information.
The company says about 6.6 million accounts are involved. They include current and former Times Car members, people who applied without finishing enrollment, and Times Business Service members. Park24 announced the incident on 28 September, ScanNetSecurity reports, and the company reported it to Japan’s Personal Information Protection Commission and the police.
What was exposed
Depending on the person, the data may include name, address, date of birth, phone number, email address, driver’s license information and images of identity documents. Corporate members’ department names are also listed, along with the IDs of nine linked services. Passwords were stored in a form that cannot be restored. The company says credit card data was not leaked and that no public release or misuse had been confirmed.
ScanNetSecurity’s headline puts the number of leaked identity document images at about 1.6 million. In its fourth report of 16 October, the company said it will no longer keep such images after registration is verified and will delete everything it still holds by the end of October 2026. That notice did not restate the count of affected people, and a further update was pushed back because the outside investigation was taking longer.
Why this matters
A driver’s license image shows a face, a name, an address and a license number in one file. That is the kind of document criminals use to build a convincing fake identity or to answer verification questions. Messages that pretend to be Times Car and ask you to “re-verify” your license are the obvious follow-up.
Read our guide to phishing messages before clicking anything about the incident, and see what to do after a data breach. If a caller uses your real details to demand money, the urgent payment guide explains the pressure pattern.
What we do not know
The attack method, the attacker and the final confirmed counts have not been reported in the sources we read. The company says an external forensic investigation is under way. We will update this page when it publishes more. See our editorial policy.
Scams to watch for after this breach
Criminals use breach news as cover. Expect messages that mention the incident, quote real details, or offer help.
- Messages posing as Times Car asking you to re-upload your driver's license or confirm account details
- Identity fraud attempts that use license details or images to open accounts or contracts
- Calls or SMS that quote your real address and birth date to build trust
What to do if you are affected
- 01Ignore links and attachments in unexpected messages claiming to be from Times Car. The company says it never asks for passwords or card details by email, SMS or phone.
- 02Former members can use the company's dedicated form to check whether their data is included.
- 03Change your Times Car password and any other account that shares it, and review linked service IDs.
- 04Be alert for new accounts, contracts or loans in your name, and report misuse to the police.
- 05Call the number printed in the company's notice only after checking it against the official site.
Frequently asked questions
How many Times Car accounts were affected?
The company's second report says about 6.6 million accounts, including members, former members, people who applied but did not finish enrollment, and Times Business Service members.
Were driver's license images taken?
ScanNetSecurity reports about 1.6 million items of identity document images, including driver's license images, leaked. The company's fourth report focuses on these images and changes how long they are kept.
Were passwords or credit cards exposed?
The company says credit card information was not leaked. Passwords are stored in a form that cannot be restored, and it has not confirmed any leak of readable passwords.
When did the breach happen?
The company detected unauthorized external access on 25 September 2026 at 9:07 a.m. and blocked the access route on 26 September.
What is Times Mobility changing?
In its fourth report of 16 October the company said it will delete identity document images right after registration is verified and will stop keeping them for 7 years after withdrawal. It plans to delete all images it still holds by the end of October 2026.
Sources
- Notice on unauthorized access to the Times Car web system (2nd report), Times Car (Times Mobility Co., Ltd.), 2026-09-28
- Notice on unauthorized access to the Times Car web system (4th report), Times Car (Times Mobility Co., Ltd.), 2026-10-16
- Times Car unauthorized access, about 1.6 million identity documents including driver's license images leaked, ScanNetSecurity, 2026-10-02
This post summarises public reporting as of 2026-11-06. Details of live incidents change; we update posts when the organization or regulators publish new facts. Spot an error? See our editorial and corrections policy.