▲ Japanese flag (File Photo)
A massive leak of personal data from Japan's largest car-sharing company is causing widespread fallout.
Concerns are growing that the damage could escalate as the leaked data includes identity verification materials such as driver's license images.
According to outlets such as the Tokyo Shimbun on October 1, Park24 announced on September 29 that personal information for 6.6 million user accounts of "Times Car," a car-sharing service operated by its subsidiary Times Mobility, has been leaked.
The company explained that unauthorized external access had occurred, and that the leaked data includes 1.6 million identity verification files, such as driver's licenses and student ID images of current and former users.
Times Car is the leading player in Japan's car-sharing market, holding a 70% share based on the number of vehicles.
It operates approximately 85,000 vehicles with a membership approaching 5.4 million.
Beyond the sheer scale of the leak, the massive exposure of ID images is sparking even greater controversy.
Attorney Kito Masaki, an expert on data privacy issues, pointed out, "It is extremely unusual for identity verification data to be leaked alongside basic information like names and addresses," adding that "for those with malicious intent, identity verification data is everything."
He expressed concern, stating, "Because it can be exploited for crimes such as identity theft and stalking, this is a major security and public safety issue," and added, "Once personal information is leaked, it is virtually impossible to retrieve, and detecting fraudulent use is also difficult."
Regarding the security breach, Park24 stated, "At this point, no fraudulent use has been confirmed," and added, "We are investigating the details."
Citing experts, the Tokyo Shimbun advised, "Users should notify credit information agencies of the breach, tighten identity authentication protocols in preparation for potential fraudulent use, and remain vigilant against identity theft and scams over an extended period," while recommending, "Changing personal information where possible, such as phone numbers."
The civic group JCA-NET emphasized, "Including this incident, there is a possibility that businesses are acquiring more personal information than necessary," adding, "It is necessary to thoroughly examine whether information beyond what regulations dictate is being used."
Attorney Kito also stated, "We need to investigate whether strict measures against unauthorized access were in place and whether retaining driver's license images was truly necessary."
(Photo: Getty Images)
※
Copying, redistribution, and unauthorized use in AI training are strictly prohibited.