[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fjML7oT1ejVuehFAmFWVVFPPQuAeV09qPCcM0dAd5LX4":3},{"article":4,"iocs":40,"watch_terms":41,"solutions":42,"lesson":128},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":23,"category":24,"article_tags":27},"79e80b7a-eb7a-489d-bfd8-ad77698de56c","Japanese Car-Sharing Site Times Car Data Breach Affects 6.6M Accounts","japanese-car-sharing-site-times-car-data-breach-affects-6-6m-accounts-54e952","Times Mobility says a data breach exposed data linked to 6.6 million accounts, including 1.6 million identity records with driver's license images and documents too.","Times Mobility, the operator of the Japanese car-sharing service Times Car, has reported a significant data breach affecting approximately 6.6 million accounts. The exposed data includes personal information, and critically, identity records for 1.6 million users, which contained images of driver's licenses and other identification documents.","Japanese car-sharing site Times Car data breach exposes 6.6M accounts, including 1.6M identity records.","https:\u002F\u002Fhackread.com\u002Fjapanese-car-sharing-site-times-car-data-breach\u002F",null,"2026-10-01T10:01:08+00:00","2026-10-01T12:00:15.467247+00:00",7,[17,20],{"name":18,"type":19},"Times Car","product",{"name":21,"type":22},"Times Mobility","vendor","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":23,"icon":12,"name":25,"slug":26},"Breaches","breaches",[28,30,35],{"category":29},{"id":23,"icon":12,"name":25,"slug":26},{"category":31},{"id":32,"icon":12,"name":33,"slug":34},"614132b8-5837-4952-b8b5-c6c9a32a1d85","Privacy","privacy",{"category":36},{"id":37,"icon":12,"name":38,"slug":39},"c5c77cdb-f7d7-4990-9436-c81dcbff1163","Policy","policy",[],[21,18],{"controls":43,"vendors":127},[44,72,101],{"slug":45,"name":46,"problem":47,"products":48},"asset-inventory","Cyber asset inventory","You cannot patch, monitor or protect the devices, cloud resources and accounts you do not know you have.",[49,56,64],{"vendor_slug":50,"vendor_name":51,"vendor_logo":52,"product_slug":53,"product_name":51,"url":54,"description":55},"lansweeper","Lansweeper","\u002Fvendor-logos\u002Flansweeper.png","lansweeper-asset-inventory","https:\u002F\u002Fwww.lansweeper.com\u002Fproduct\u002Fasset-inventory\u002F","Discovery with and without agents that keeps one central, always-updated inventory of devices, software and their details.",{"vendor_slug":57,"vendor_name":58,"vendor_logo":59,"product_slug":60,"product_name":61,"url":62,"description":63},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-cyber-assets","Axonius Cyber Assets","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fcyber-assets","A continuously reconciled view of every asset, who owns it, which security controls cover it and where it drifts from policy.",{"vendor_slug":65,"vendor_name":66,"vendor_logo":67,"product_slug":68,"product_name":69,"url":70,"description":71},"runzero","runZero","\u002Fvendor-logos\u002Frunzero.png","runzero-platform","runZero Platform","https:\u002F\u002Fwww.runzero.com\u002Fplatform\u002F","Finds and fingerprints everything on the network and in the cloud, including IoT and OT devices, without agents or credentials, and flags exposures.",{"slug":73,"name":74,"problem":75,"products":76},"data-loss-prevention","Data loss prevention (DLP)","Sensitive data cannot quietly leave by email, upload, USB stick or AI tool.",[77,85,93],{"vendor_slug":78,"vendor_name":79,"vendor_logo":80,"product_slug":81,"product_name":82,"url":83,"description":84},"netskope","Netskope","\u002Fvendor-logos\u002Fnetskope.png","netskope-dlp","Netskope DLP","https:\u002F\u002Fwww.netskope.com\u002Fproducts\u002Fdata-loss-prevention","Data loss prevention for web, cloud apps, AI tools and endpoints.",{"vendor_slug":86,"vendor_name":87,"vendor_logo":88,"product_slug":89,"product_name":90,"url":91,"description":92},"proofpoint","Proofpoint","\u002Fvendor-logos\u002Fproofpoint.png","enterprise-dlp","Proofpoint Enterprise DLP","https:\u002F\u002Fwww.proofpoint.com\u002Fus\u002Fproducts\u002Fdata-loss-prevention","Data loss prevention across email, cloud and endpoints.",{"vendor_slug":94,"vendor_name":95,"vendor_logo":96,"product_slug":97,"product_name":98,"url":99,"description":100},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","purview-dlp","Microsoft Purview Data Loss Prevention","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fdata-security-governance\u002Fmicrosoft-purview-data-security","Data classification and loss prevention across Microsoft 365, endpoints and connected cloud apps.",{"slug":102,"name":103,"problem":104,"products":105},"encryption-key-management","Encryption and key management","Stolen data stays unreadable, and the keys stay under your control.",[106,114,119],{"vendor_slug":107,"vendor_name":108,"vendor_logo":109,"product_slug":110,"product_name":111,"url":112,"description":113},"thales","Thales","\u002Fvendor-logos\u002Fthales.png","luna-hsm","Thales Luna HSM","https:\u002F\u002Fcpl.thalesgroup.com\u002Fencryption\u002Fhardware-security-modules","Hardware security modules for protecting cryptographic keys.",{"vendor_slug":107,"vendor_name":108,"vendor_logo":109,"product_slug":115,"product_name":116,"url":117,"description":118},"ciphertrust","CipherTrust Data Security Platform","https:\u002F\u002Fcpl.thalesgroup.com\u002Fencryption\u002Fdata-security-platform","Data discovery, encryption and central key management across on-premises and cloud.",{"vendor_slug":120,"vendor_name":121,"vendor_logo":122,"product_slug":123,"product_name":124,"url":125,"description":126},"hashicorp","HashiCorp","\u002Fvendor-logos\u002Fhashicorp.png","vault","HashiCorp Vault","https:\u002F\u002Fwww.hashicorp.com\u002Fen\u002Fproducts\u002Fvault","Secrets management with short-lived credentials and encryption as a service.",[],{"slug":129,"title":130,"body":131,"framework_refs":132,"framework_notes":145},"66m-accounts-exposed-in-times-car-data-breach-including-drivers-license-images","6.6M Accounts Exposed in Times Car Data Breach Including Driver's License Images","Times Mobility suffered a major data breach exposing personal and identity records for approximately 6.6 million users, including highly sensitive driver's license images for 1.6 million accounts. The exposure of government-issued identity documents represents a severe risk, as this data can enable identity theft, fraud, and account takeover attacks that are difficult for victims to reverse. Organizations that collect and store sensitive identity verification documents must apply proportionally stronger security controls, including encryption at rest and strict access limitations. This incident underscores that car-sharing and mobility platforms, which routinely collect KYC (Know Your Customer) data, are high-value targets requiring enterprise-grade data governance. Regulatory frameworks such as Japan's Act on the Protection of Personal Information (APPI) impose strict obligations on handling such sensitive records.",[133,134,135,136,137,138,139,140,141,142,143,144],"CIS Control 3 - Data Protection","CIS Control 6 - Access Control Management","CIS Control 8 - Audit Log Management","NIST SP 800-53 AC-3 - Access Enforcement","NIST SP 800-53 SC-28 - Protection of Information at Rest","NIST SP 800-53 AU-2 - Event Logging","NIST Privacy Framework PR.DS-P","GDPR Article 5(1)(e) - Storage Limitation","GDPR Article 25 - Data Protection by Design and by Default","Japan APPI - Act on the Protection of Personal Information (2022 Amendments)","ISO\u002FIEC 27001:2022 - A.8.10 Information Deletion","ISO\u002FIEC 27001:2022 - A.5.33 Protection of Records",{}]