Times Car confirms breach affecting 6.6 million accounts

Japanese car-sharing service Times Car says a cyberattack compromised information linked to 6.6 million current and former members. The affected accounts include members of its Times Business Service corporate program.

The company announced the incident on September 25, saying a third party accessed its systems at the beginning of the month. Times Car blocked the unauthorized access on September 26. It later confirmed that data had been stolen.

The company said passwords were stored in a form that could not be restored, but did not explain further. Its investigation found that credit card information was not affected. Times Car said there is currently no evidence that the stolen data has been distributed online.

The company is investigating the cause and scope of the incident with help from an external expert. It plans to notify affected customers individually, in stages. Times Car also said its services continue to operate as normal.

Times Car urged members to be cautious of emails, text messages, and phone calls claiming to come from the company, and not to open attachments or enter passwords or credit card details in response to them.