Park24, the Japanese operator behind the Times Car sharing network, has told customers that someone outside the company reached its member files.
Its monitoring systems flagged the intrusion at 9:07 am on September 25. By 7:25 am the next morning, engineers had cut the route the attacker used, blocked traffic from the source and confirmed the door was shut. The company says it is still watching.
What may have left the building is broad. Park24 lists names, addresses, dates of birth, phone numbers, email addresses, membership numbers, license information, identity verification documents, corporate member details and linked service IDs. Former members are included, not only current ones.
teiss reported that the haul covered roughly 6.6 million accounts. Park24’s investor filing on September 28 confirmed the breach at a consolidated subsidiary and said no widespread publication or misuse of the records had been found so far.
The operator has reported the incident to Japan’s Personal Information Protection Commission and brought in outside specialists to trace the cause and the full blast radius. It is also warning members about emails, calls and text messages that impersonate the brand, and reminding them that it never asks for passwords or card numbers.
Car sharing asks for more than a payment method. Sign-up requires a driving license and identity documents, which makes a car-share database a compact supply of the exact material fraudsters use to open accounts and clear verification checks. That is why the painful part here is not the volume but the document images.
