Times Car (Times Mobility, Park24 Group) data breach

What happened

Times Mobility, which runs the Times Car car-sharing service for parking operator Park24, detected unauthorized access to its web system on September 25, 2026 and cut off the intrusion by the next morning. In a September 28 update it confirmed that data from about 6.6 million accounts had been taken, covering current and former Times Car and Times Business Service members as well as people who applied but never completed sign-up. Depending on the person, the data includes names, corporate department names, addresses, dates of birth, phone numbers, email addresses, driver's license information, ID document images such as license photos, passwords stored in a non-restorable form, and IDs for nine linked services such as JR West's WESTER ID. Credit card information was not leaked, and the company said it had not seen the data published or misused.

What should I do?

1. Assume your driver's license details and photo may be in criminals' hands; be suspicious of anyone who contacts you citing them, and watch for loans, phone contracts or accounts opened in your name.
2. Don't follow links in emails, texts or calls claiming to be from Times Car; Times says it never asks for passwords or card details that way.
3. Change your password on any other service where you used the same one as Times Car, including linked services such as WESTER ID.
4. Former members who want to check whether their data was included can use the dedicated inquiry form on Times Car's notice page.

More data breaches in Japan →

Check the other services you use →