5CriticalConfirmedAnnounced Updated
Unauthorized access to a car-sharing web system leaked 6,628,007 member records. Encrypted ID images were sent out for 1,464,800 records and only accessed for 891,602. Payment data was limited to card last-4 digits.
This incident was imported from a dataset that compiles public announcements, and we are still checking it against the sources. Counts and causes will be updated after the check. Sources are in Japanese.
| Data | Status | Count | Group | Evidence |
|---|---|---|---|---|
| Name | Leak confirmed | 6,628,007 records | タイムズカー会員登録情報 | Source(opens in a new tab) |
| Postal address | Leak confirmed | 6,628,007 records | タイムズカー会員登録情報 | Source(opens in a new tab) |
| Phone number | Leak confirmed | 6,628,007 records | タイムズカー会員登録情報 | Source(opens in a new tab) |
| Email address | Leak confirmed | 6,628,007 records | タイムズカー会員登録情報 | Source(opens in a new tab) |
| Date of birth | Leak confirmed | 6,628,007 records | タイムズカー会員登録情報 | Source(opens in a new tab) |
| ID documents | Leak confirmed | 6,628,007 records | タイムズカー会員登録情報 | Source(opens in a new tab) |
| User or member ID | Leak confirmed | Not disclosed | タイムズカー会員登録情報 | Source(opens in a new tab) |
| Password | Leak confirmed | 4 records | タイムズカー会員登録情報 | Source(opens in a new tab) |
| ID documents | Leak confirmed | 1,464,800 records | 本人確認画像・外部送信確認 | Source(opens in a new tab) |
| ID documents | Access confirmed | 891,602 records | 本人確認画像・アクセスのみ | Source(opens in a new tab) |
| Name | Leak confirmed | 5 records | タイムズクラブ関連情報 | Source(opens in a new tab) |
| Postal address | Leak confirmed | 5 records | タイムズクラブ関連情報 | Source(opens in a new tab) |
| Date of birth | Leak confirmed | 5 records | タイムズクラブ関連情報 | Source(opens in a new tab) |
| ID documents | Leak confirmed | 5 records | タイムズクラブ関連情報 | Source(opens in a new tab) |
| User or member ID | Leak confirmed | Not disclosed | タイムズクラブ関連情報 | Source(opens in a new tab) |
| Payment details | Leak confirmed | 28 records | タイムズクラブ関連情報 | Source(opens in a new tab) |
Counts are the figures the organization announced. Because the same person may be counted more than once, we do not add the rows together.
General steps based on the type of data involved. Check the organization’s notice or help line to see whether you are affected.
Picked from the cause of the incident: tools that help you check your own systems for the same kind of weakness, or spot the warning signs.
An agentless vulnerability scanner that checks the packages installed on a server and lists the ones affected by known CVEs.
A free security platform (SIEM/XDR) that collects logs, configuration, and vulnerability data from agents on your endpoints and shows it all in one dashboard.
An intrusion detection and prevention engine (IDS/IPS) that matches network traffic against rules and records suspicious activity as alerts.
UpDown to select Enter to open Esc to close