SECURITY KNOWLEDGE
← Incident database

times-car-2026 · Disclosed 2026-09-25

Times Car: member records and identity documents leaked

The company confirmed leakage of 6.6 million member records, including 1.6 million identity-document images, covering withdrawn members and incomplete applicants.

Cause unresolved / undisclosed

Outcome: Confirmed breach

Entry path and evidence

  • Reported fact

    Leakage covered 6.6 million member records, including 1.6 million identity documents; these counts must not be added.

    [s2]流出した情報 / 対象件数
  • Reported fact

    The intrusion route and cause remain under investigation.

    [s1]今後の調査

Timeline

  1. Incident disclosed. [s1]

Reported response

  • Reported fact

    The company reported blocking malicious communications on September 26 and notifying affected users.

    [s1]対応状況

Evidence relevant to prevention

Insufficient evidence

The entry path cannot be assessed; inspect former-member and applicant retention, identity-document privileges, and access logs.

Editorial assessment; not a determination of liability. [s1]

Unknowns and AI involvement

AI involvementUnknown

The cited sources do not establish attacker use of AI; absence of evidence is not evidence of absence.

September 25 is detection and disclosure, not an established intrusion start; vulnerability and patch timing are unknown.

Sources

  1. [s1] タイムズモビリティ · Primary source

    タイムズカーにおける不正アクセスに関するお知らせ（第2報） ↗

    Published 2026-09-28 · Reviewed 2026-10-02

  2. [s2] タイムズモビリティ · Primary source

    タイムズカーにおける不正アクセスに関するお知らせ（第3報） ↗

    Published 2026-09-29 · Reviewed 2026-10-02