Times Car
A ride records the precise GPS of your whole journey, both ends, tied to your account, and trip records commonly stay seven to ten years under tax and accounting rules. Every policy reserves the right to hand the trail to police and regulators on request.
Reported incidents
6.6 million car-sharing accounts taken, driving licence images included
2026-09-25Affected Times Car web system
Park24, which runs the Times Car car-sharing service in Japan, said on 25 September 2026 that an outsider had got into the Times Car web system. Its second report, on 28 September, put the affected accounts at about 6.6 million, covering current and former members and corporate users. The data included names, addresses, dates of birth, phone numbers, email addresses, driving licence details, images of identity documents, linked service IDs and passwords, which Park24 said were stored in a form that cannot be restored. Its third report said about 1.6 million accounts had document images taken. Park24 said card details were not leaked. Access was blocked on 26 September.
People affected typically ask Times Car to confirm whether their information was included, and which categories.
The verified route
DÆTRAX is a personal data accountability ledger: a dated record of which companies hold your personal data, what you asked them to do about it, and what they claimed in reply.