# Times Mobility data breach and legal fallout

> Live situation record from CLSTR: https://clstr.news/situations/times-mobility-data-breach
> Updated: 2026-09-30T08:14:21.000Z. Sources: 15. Developments: 2.

Times Mobility, the operator of the car-sharing service ‘Times Car’, confirmed a major data breach involving approximately 6.6 million user accounts. The unauthorized access, detected in late September 2026, compromised data from current members, former members, and individuals in the application process.

Leaked information includes names, addresses, dates of birth, telephone numbers, email addresses, and driver's license details. While passwords were stored in a non-reversible hashed format and credit card information remained secure, the breach included linked service IDs for nine different services, such as the JR West Group’s WESTER ID.

A significant portion of the breach—approximately 1.6 million accounts—involved the theft of identity verification documents, including images of driver's licenses, student IDs, and residence verification documents. This exposure poses risks regarding identity theft and fraudulent online verification.

Following the breach, the Japan Credit Information Reference Center (JICC) reported a surge in consumer requests to prevent fraudulent use of leaked information, which led to the temporary suspension of its smartphone app due to high volume. 

Legal repercussions are also emerging. Attorney Yuki Makino has launched a dedicated website to organize a collective lawsuit against Times Mobility. As of October 1, nearly 3,000 individuals have registered their intent to participate. Makino stated that the scale of the leak, specifically the exposure of driver's licenses, requires “more than just a corporate apology.”

Times Mobility has reported the incident to the police and the Personal Information Protection Commission. The company has blocked the unauthorized access routes and is working with external specialists to conduct a forensic investigation. Affected individuals are to be notified individually.

## Claims

- Identity verification documents, including driver's license images, were leaked for approximately 1.6 million accounts. (corroborated by 3 sources)
- Approximately 6.6 million account records were leaked due to unauthorized access to the Times Mobility website. (corroborated by 2 sources)
- Attorney Yuki Makino has opened a special website to recruit participants for a collective lawsuit against Times Mobility. (single source)
- Nearly 3,000 people had registered their intent to participate in the lawsuit as of October 1. (single source)
- The Japan Credit Information Reference Center (JICC) temporarily suspended its smartphone app due to a surge in applications to prevent identity theft. (single source)

## Timeline

### 2026-09-30: Times Car data breach leaks 6.6 million accounts and 1.6 million driver's licenses

Times Car operator Times Mobility reported a leak of 6.6 million accounts, including 1.6 million driver's license images. A class-action lawsuit is forming as consumers rush to protect their credit identities.

6 sources. https://clstr.news/cluster/times-mobility-reports-data-breach-affecting-66-million-accounts

### 2026-09-28: Times Car suffers data breach affecting 6.6 million accounts

Times Car operator Times Mobility confirmed a data breach affecting 6.6 million accounts, including the leak of 1.6 million driver's license images and other personal identification documents.

9 sources. https://clstr.news/cluster/times-car-service-faces-potential-leak-of-66-million-users-data

---
Cite as: Times Mobility data breach and legal fallout. CLSTR, https://clstr.news/situations/times-mobility-data-breach