Park24 said a third-party intrusion into the Times Car web system leaked customer information, first announcing it on 25 September and updating the findings in a fifth report on 23 October [1]. The fifth report said the company had previously warned that about 1.6 million identity-document images might have leaked, and that later analysis found signs that about 1.46 million of those images were sent out; it also said the leaked data include personal details such as names and addresses plus identity documents, while full card numbers and security codes are not stored [1]. The company is notifying affected customers, has opened a dedicated 24-hour line at 0120-25-8924, and says the presence of identity information creates risks of phishing sites and emails, impersonation in applications, and misuse of personal data [1].
Park24 says a Times Car web-system breach left about 1.46 million ID-document images with signs of being sent out
1 min read
- Disclosed
- Sep 25, 2026
- Occurred
- Sep 25, 2026
- Published
- Nov 12, 2026
- Last updated
- Nov 12, 2026
- Scale
- 1,460,000 people[1]
- CVSS basis
- Our assessment
- Attack vector
- Impact
- Data type
- Actor type
- Motivation
On this page
30-second summary
What happened
Who is affected
Industries mainly affected: Transportation & logistics
What to do nowOur advice
- If you may be affected, read the company’s notice and contact the dedicated 24-hour line 0120-25-8924 or the form it provides [1].
Timeline
Technical details
Remediation
Vendor guidance
- 1Use the official notice and help line, and watch for phishing mitigate[1]
If you are affected, follow the company’s notice and call 0120-25-8924 (24 hours). Watch for phishing and impersonation.
References
Official / primary1
- [1]パーク242026-10-23Accessed 2026-11-12Snapshot 2026-11-12 sha256 9642d768e540
“外部送信の痕跡が確認された本人確認書類画像データは約146万件であることが判明しました。”
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.