Japanese Car-Sharing Site Times Car Data Breach Affects 6.6M Accounts
Japanese car-sharing site Times Car data breach exposes 6.6M accounts, including 1.6M identity records.
Times Mobility, the operator of the Japanese car-sharing service Times Car, has reported a significant data breach affecting approximately 6.6 million accounts. The exposed data includes personal information, and critically, identity records for 1.6 million users, which contained images of driver's licenses and other identification documents.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Times Mobility?
Get an email when a new story names Times Mobility, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonTimes Mobility suffered a major data breach exposing personal and identity records for approximately 6.6 million users, including highly sensitive driver's license images for 1.6 million accounts. The exposure of government-issued identity documents represents a severe risk, as this data can enable identity theft, fraud, and account takeover attacks that are difficult for victims to reverse. Organizations that collect and store sensitive identity verification documents must apply proportionally stronger security controls, including encryption at rest and strict access limitations. This incident underscores that car-sharing and mobility platforms, which routinely collect KYC (Know Your Customer) data, are high-value targets requiring enterprise-grade data governance. Regulatory frameworks such as Japan's Act on the Protection of Personal Information (APPI) impose strict obligations on handling such sensitive records.
What helps against this
How we list vendors- Cyber asset inventory
You cannot patch, monitor or protect the devices, cloud resources and accounts you do not know you have.
- Data loss prevention (DLP)
Sensitive data cannot quietly leave by email, upload, USB stick or AI tool.
- Encryption and key management
Stolen data stays unreadable, and the keys stay under your control.