Japanese Car‑Sharing Platform Times Car Reports Breach Impacting Over 6 Million Users

Times Car, a leading car‑sharing service in Japan, announced that a cyberattack has exposed roughly 6.6 million user accounts. The breach, first disclosed late last week, represents one of the largest data‑security incidents in the country's mobility sector. The company confirmed that the unauthorized access affected accounts registered on its platform, prompting an immediate investigation.

The compromised accounts likely contain the personal information that Times Car collects to operate its service, such as names, email addresses, phone numbers and payment details. While the full scope of the data exposed has not been detailed, experts note that the combination of contact and financial information could enable identity theft or fraud if exploited. No evidence has yet been presented that the stolen data has been used maliciously.

In response, Times Car said it has engaged external cybersecurity specialists to assess the breach and is cooperating with Japanese law‑enforcement agencies. The firm has begun resetting passwords for affected users and is urging customers to review their account activity. A dedicated support line and online resources have been set up to help users protect their information and report suspicious activity.

The incident arrives amid a wave of cyber threats targeting transportation and mobility providers worldwide. Similar attacks on ride‑hailing and car‑sharing platforms have highlighted the sector’s reliance on large volumes of personal data and the challenges of safeguarding it. In Japan, the Personal Information Protection Commission has tightened oversight of data‑handling practices, and companies found lacking can face substantial penalties under the Act on the Protection of Personal Information.

Authorities have not indicated any immediate regulatory action, but the breach is expected to prompt closer scrutiny of Times Car’s security protocols. Users are advised to monitor bank statements and credit reports for unusual activity and to adopt strong, unique passwords. As the investigation continues, the company has pledged to provide further updates and to implement additional safeguards to restore confidence in its platform.