タイムズカー(タイムズモビリティ)Data breach / unauthorized access incident
- Occurred on
- September 25, 2026
- Announced on
- September 25, 2026
- Severity
- SSLarge-scale compromise of sensitive data such as payment or identity-verification records affecting millions.
- Scale
- 6,600,000 accounts
- Main impact
- About 6.6 million accounts, including withdrawn users, were affected; disclosed data include names, addresses, dates of birth, phone numbers, email addresses, driver’s license information and other personal data, passwords stored in a non-recoverable format, linked service IDs, etc. Of these, about 1.6 million accounts reportedly had images of identity verification documents such as driver’s licenses leaked. Credit card information is said not to be included.
- Information involved
- Full nameHome addressDate of birthPhone numberEmail addressIdentity verification dataPasswordAuth tokenUser / member ID
- Cause / key point
- Leak due to unauthorized external access to a web system (detected on 2026-09-25); the method is under investigation together with external specialist organizations.
- Industry
- Transport & travel
- Last updated
- October 21, 2026
Is this incident worth paying attention to?
Written & reviewed
Reviewed byYutaro SasaoFounder & CEO, MediaLeap Inc.
CEO of MediaLeap Inc. Working on both sides of web advertising and web media since 2013; founded the company in May 2025.
Review scope: cross-checking against primary sources (official and government announcements), verifying claims stay within the facts, and checking source attribution。Last reviewed:
Written by:Leak Watch editorial team (AI-assisted drafts verified against sources by the editorial team) · Reviewer profile · Request a correction
Related incidents
Browse the database →Incidents sharing the same company, service, attack method or industry (grouped automatically from the disclosures).
Incidents related to "クレジットカード"
Incidents where the damage spread through the same service or system.
- SSリクルート（カーセンサーnet、C-MATCH）2026.10.21 announced・Affected 3,709,551 records
- A株式会社日建学院（事前確認講習システム） / （公財）マンション管理センター2026.10.20 announced・Affected 3,597 people
- Aニフティ（回線申込・受付管理システム）2026.10.19 announced・Affected 542,513 records
- Bデーリー東北新聞社（受注制作Webページ）2026.10.16 announced・Affected 423 records
- SSバーガーキング・ジャパン(公式アプリ)2026.10.15 announced・Affected 11,180,000 records
- SSソースネクスト2026.10.15 announced・Affected 22,519,960 records
Same attack method
- SS焼肉きんぐ2026.10.05 announced・Affected 10,788,963 records
- Bユミルリンク（メール配信システム）2026.10.19 announced・Affected 9,000,000 records
- Sブックオフグループ(ブックオフコーポレーション)2026.10.09 announced・Affected 6,383,279 people
- Sヤマト運輸(クロネコ代金後払いサービス)2026.09.29 announced・Affected 5,310,000 records
- Aビューカード（VIEW’s NET）2026.10.09 announced・Affected 4,030,000 records
- S2りんかんイエローハット2026.06.19 announced・Affected 3,180,000 people
Same industry
- SSSアドベンチャー（スカイチケット）2026.10.10 announced・Affected 14,640,000 records
- S日水物流(ニッスイグループ)2026.10.07 announced・Affected Unknown
- Sあいの風とやま鉄道株式会社2026.09.15 announced・Affected 1,409 people
- S西武鉄道（52席の至福）2026.09.02 announced・Affected 500 people
- Aエイチ・アイ・エス(HIS タイ現地法人)2026.10.07 announced・Affected 627 people
- A佐川急便（お荷物問い合わせ）2026.10.01 announced・Affected Unknown
Attack method classification: Unauthorized access (method undisclosed)(Breached, but the technique was not identified or disclosed)
Read the Unauthorized access (method undisclosed) guide and national trends →