Times Car Confirms Breach Affecting 6.6 Million Member Accounts

· Original article ↗

Summary

Times Car says an intrusion exposed personal, driver’s license and account data for about 6.6 million current and former members. Credit card data was unaffected; the company is investigating and warning customers about fraud attempts.

Key points

  • A third party accessed Times Car systems at the beginning of September; the company says it blocked the unauthorized access on September 26.
  • The breach affects about 6.6 million current and former Times Car and Times Business Service members.
  • Exposed data includes contact details, birth dates, driver’s license and identity-document information, passwords and linked service IDs.
  • Times Car says passwords were stored in a form that cannot be restored, but provided no further technical details.
  • The company says credit card information was unaffected and it has found no evidence that the stolen data was distributed online.
  • Times Car is investigating with an external expert and plans to notify affected customers in stages; its services remain operational.
  • The company warns members to watch for suspicious emails, texts and calls, and avoid opening attachments or entering passwords or card details.

Article Details

Victim Organization
Times Car
Incident Type
Cyberattack involving unauthorized access to systems and confirmed data theft
Data Types Exposed
  • Full names
  • Department names for corporate members
  • Physical addresses
  • Dates of birth
  • Telephone numbers
  • Email addresses
  • Driver’s license information
  • Identity verification document information, including images of driver’s licenses
  • Account passwords
  • Linked service IDs
Affected Records
Approximately 6.6 million current and former Times Car and Times Business Service members were affected.
Operational Impact
The company said its services continued to operate normally. It blocked the unauthorized access and is investigating the incident with an external expert.
Ransom Or Extortion
None reported.
Claim Status
confirmed

Vendors

Products