Overview
The first report listed names, addresses, birth dates, phones, emails, member numbers, licence data, ID documents, corporate-member data and linked-service IDs. The third report said ID-document images (e.g. driver's licences) of "about 1.6 million" accounts leaked (count blank); the total member scope is not fixed in this record.
Timeline
- Occurred
- Discovered
- Disclosed
Detected; first report.
ID images of ~1.6M accounts confirmed.
Organization response
Per the notice, the organisation investigated and contained the incident, notified individuals and offered monitoring or protective resources.
What you can do
Be wary of emails, SMS or calls impersonating the organisation; do not open links or attachments or enter passwords or card details. Change reused passwords on other services.
Sources
- タイムズカーWebシステムへの不正アクセスに関する調査結果および今後の対応について（第3報）パーク２４株式会社 · 2026-11-09
- 「タイムズカーWebサイト」への不正アクセスによる個人情報漏えいの可能性について（第1報）パーク２４株式会社 · 2026-11-09