[REVISION HISTORY]

Times Mobility data breach and legal fallout

Updated 1 time since CLSTR started tracking revisions of this situation.

What changed

2026-09-30 23:41 UTC → 2026-10-02 07:49 UTC · added ~~removed~~

Times Mobility, the operator of the car-sharing service ‘Times Car’, confirmed a major data breach involving approximately 6.6 million user accounts. The unauthorized access, detected in late September 2026, compromised data from current members, former members, and individuals in the application process. Leaked information includes names, addresses, dates of birth, telephone numbers, email addresses, and driver's license details. While passwords were stored in a non-reversible hashed format and credit card information remained secure, the breach included linked service IDs for nine different services, such as the JR West Group’s WESTER ID. A significant portion of the breach—approximately 1.6 million accounts—involved the theft of identity verification documents, including images of driver's licenses, student IDs, and residence verification documents. This exposure poses risks regarding identity theft and fraudulent online verification. Following the breach, the Japan Credit Information Reference Center (JICC) reported a surge in consumer requests to prevent fraudulent use of leaked information, which led to the temporary suspension of its smartphone app due to high volume. Legal repercussions are also emerging. Attorney Yuki Makino has launched a dedicated website to organize a collective lawsuit against Times Mobility. As of October 1, nearly 3,000 individuals have registered their intent to participate. Makino stated that the scale of the leak, specifically the exposure of driver's licenses, requires “more than just a corporate apology.” Times Mobility has reported the incident to the police and the Personal Information Protection Commission. The company has blocked the unauthorized access routes and is working with external specialists to conduct a forensic investigation. Affected individuals are to be notified individually.

Versions

Only revisions since CLSTR began indexing content versions appear here. Select a version to see what changed compared to the one before it.