{
  "version": "https://jsonfeed.org/version/1.1",
  "title": "Times CAR breach exposes 6.6 million accounts and 1.46 million driver's license images · updates",
  "home_page_url": "https://pwn.watch/i/park24-times-car-data-breach-6-6m-accounts",
  "feed_url": "https://pwn.watch/i/park24-times-car-data-breach-6-6m-accounts/feed.json",
  "description": "Attackers exploited a vulnerability in the web system of Times CAR, the Japanese car-sharing service Park24 runs through its subsidiary Times Mobility. The intrusion was detected on Sep 25 2026. Park24's forensic report on Oct 23 says data for 6,628,007 accounts (names, addresses, birth dates, phone numbers, emails and driver's license information) shows traces of being sent out, along with 1,464,800 encrypted ID document images such as driver's licenses; another 891,602 encrypted images were accessed without signs of transmission. No credit card numbers were stored, and Park24 says it has seen no sale or publication of the data so far. It will pay affected ID-image users 3,000 yen each and is booking a 5.5 billion yen special loss.",
  "language": "en",
  "_pwn": {
    "slug": "park24-times-car-data-breach-6-6m-accounts",
    "severity": "high",
    "status": "live",
    "patchStatus": "partial",
    "rss": "https://pwn.watch/i/park24-times-car-data-breach-6-6m-accounts/feed.xml",
    "llms": "https://pwn.watch/i/park24-times-car-data-breach-6-6m-accounts/llms.txt",
    "json": "https://pwn.watch/i/park24-times-car-data-breach-6-6m-accounts.json"
  },
  "items": [
    {
      "id": "https://pwn.watch/i/park24-times-car-data-breach-6-6m-accounts#2026-10-23-7175929d",
      "url": "https://pwn.watch/i/park24-times-car-data-breach-6-6m-accounts#2026-10-23-7175929d",
      "title": "Times CAR breach exposes 6.6 million accounts and 1.46 million driver's license images: Park24 publishes the forensic results: a vulnerability in the Times CAR web system was exploited. Data for 6,628,007 accounts shows traces of external transmission, as do 1,464,800 encrypted ID document images (891,602 more were accessed only). It will pay affected ID-image users 3,000 yen, delete stored ID images by the end of October and book a 5.5 billion yen special loss.",
      "content_text": "Times CAR breach exposes 6.6 million accounts and 1.46 million driver's license images: Park24 publishes the forensic results: a vulnerability in the Times CAR web system was exploited. Data for 6,628,007 accounts shows traces of external transmission, as do 1,464,800 encrypted ID document images (891,602 more were accessed only). It will pay affected ID-image users 3,000 yen, delete stored ID images by the end of October and book a 5.5 billion yen special loss.\n\nSource: https://www.timesmobi.co.jp/news/2026/10/bca8b21d0fc52c552c3ac8e04a631177ef4cd31c.html",
      "date_published": "2026-10-23T00:00:00.000Z",
      "external_url": "https://www.timesmobi.co.jp/news/2026/10/bca8b21d0fc52c552c3ac8e04a631177ef4cd31c.html",
      "tags": [
        "high"
      ]
    },
    {
      "id": "https://pwn.watch/i/park24-times-car-data-breach-6-6m-accounts#2026-09-28-fda77348",
      "url": "https://pwn.watch/i/park24-times-car-data-breach-6-6m-accounts#2026-09-28-fda77348",
      "title": "Times CAR breach exposes 6.6 million accounts and 1.46 million driver's license images: Park24 discloses the breach: about 6.6 million current and former Times CAR and Times Business Service accounts, including names, addresses, birth dates, phone numbers, emails, driver's license information and ID document images. No credit card data was taken; passwords were stored in a non-reversible format.",
      "content_text": "Times CAR breach exposes 6.6 million accounts and 1.46 million driver's license images: Park24 discloses the breach: about 6.6 million current and former Times CAR and Times Business Service accounts, including names, addresses, birth dates, phone numbers, emails, driver's license information and ID document images. No credit card data was taken; passwords were stored in a non-reversible format.\n\nSource: https://www.park24.co.jp/news/files/3f5f7768d2de73e7ff4dd66993b781df.pdf",
      "date_published": "2026-09-28T00:00:00.000Z",
      "external_url": "https://www.park24.co.jp/news/files/3f5f7768d2de73e7ff4dd66993b781df.pdf",
      "tags": [
        "high"
      ]
    },
    {
      "id": "https://pwn.watch/i/park24-times-car-data-breach-6-6m-accounts#2026-09-25-25f688fd",
      "url": "https://pwn.watch/i/park24-times-car-data-breach-6-6m-accounts#2026-09-25-25f688fd",
      "title": "Times CAR breach exposes 6.6 million accounts and 1.46 million driver's license images: Times Mobility, the Park24 subsidiary that runs the Times CAR car-sharing service, detects unauthorized access to its web system at 9:07 a.m. and blocks the access route by 7:25 a.m. the next day.",
      "content_text": "Times CAR breach exposes 6.6 million accounts and 1.46 million driver's license images: Times Mobility, the Park24 subsidiary that runs the Times CAR car-sharing service, detects unauthorized access to its web system at 9:07 a.m. and blocks the access route by 7:25 a.m. the next day.\n\nSource: https://www.park24.co.jp/news/files/3f5f7768d2de73e7ff4dd66993b781df.pdf",
      "date_published": "2026-09-25T00:00:00.000Z",
      "external_url": "https://www.park24.co.jp/news/files/3f5f7768d2de73e7ff4dd66993b781df.pdf",
      "tags": [
        "high"
      ]
    }
  ]
}