Times Car suffers data breach affecting 6.6 million accounts

Times Mobility, operator of the car-sharing service Times Car, has confirmed a major data breach affecting approximately 6.6 million user accounts. The unauthorized access, detected on September 25, 2026, compromised data belonging to current members, former members, and individuals who had applied for membership but had not yet completed the process.

The leaked information includes names, addresses, dates of birth, telephone numbers, email addresses, and driver's license details. Notably, approximately 1.6 million accounts were affected by the theft of identity verification documents, including images of driver's licenses, student IDs, and residence verification documents.

While passwords were stored in a non-reversible hashed format and credit card information was not compromised, the leak of identity images poses significant risks for identity theft and fraudulent online verification (eKYC). Times Mobility has reported the incident to the Personal Information Protection Commission and the police, and is conducting a forensic investigation. The company has urged users to remain vigilant against suspicious emails, SMS, or phone calls claiming to be from Times Car.