EXPLORINEER
en

JP — ITmedia

Times Car Asks How the ¥3,000 Apology Payment Was Calculated; Park24 Responds

Security1 min read

Times Car operator Park24 told ITmedia how it chose the 3,000-yen apology payment for people whose data leaked. The company has not yet said what form the payment will take.

Park24 explains the 3,000-yen payment

Park24 runs the car-sharing service Times Car. A data leak hit its customers. On October 27, the company said the 3,000-yen apology payment was set after looking at the choices customers could make and the costs they might face. It did not explain the exact method it used to reach 3,000 yen.

Key numbers

  • 3,000 yen (about the value of cash or gift vouchers) per affected person
  • 1,465,349 people are eligible for the payment
  • Park24 expects to record a special loss of 5.5 billion yen for the payment and related costs
  • The unauthorized access was found on September 25

What leaked

Park24 said in its fifth update on October 23 that some images of driver's licenses and other ID documents had been sent outside the company. Times Car is a service where people rent cars by the hour, so these ID images were stored for members. The company said the cause was a weakness in a web system that attackers used.

Why it matters

Many people may have had their ID images exposed. The payment is a sign that the company sees real harm to customers. But key details are still missing, such as what kind of voucher or cash transfer people will get and when. Customers who want to know if they are affected will need to check the company's updates.

What to watch

  • The type of payment: gift card, e-points, or bank transfer
  • When payments will start
  • How people can check if their data was included, through My Page or by email
  • Park24's full plan to improve security, expected by the end of this year
  • Deletion of stored license images by the end of October

Glossary

Park24
The Japanese company that runs the Times Car car-sharing service.
Times Car
A car-sharing service where people rent cars for short periods.

Ad

Add 150 words. Learn 10 a day.

Dicter word books send only the words you learn to your review notes.

More in this topic

Security전자신문

[AI Guarding AI] Microsoft Extends Project Perception to Protect Internal AI Agents, Not Just External Threats

Microsoft says AI security must now cover internal AI agents that access enterprise data, tools, and systems, not only external AI-powered attacks. Its Project Perception, unveiled in July, combines signals, security context, models, and specialized Red, Blue, and Green agents into a continuously learning defense system, with humans retaining final control over key decisions. The company also describes "agentic insiders," offers layered protection and dynamic risk scoring, and provides traceability so security teams can monitor agent behavior and adjust policies.

SecurityITmedia

GMO Confirms Attacker Published Information; Investigating Whether Customer Data Is Included, Considering Additional Condolence Payments

GMO Internet Group said that at 12:30 p.m. on October 27 it confirmed the publication, apparently by an attacker, of information that appears to concern customers, related to unauthorized access to its FX auto-trading VPS "Onamae.com Desktop Cloud." The company is still investigating the contents, which may include inaccurate information, and is considering additional condolence payments for affected users whose information was published, beyond the flat 5,000-yen payment announced earlier.

Security전자신문

[AI Against AI] Piolink: From AI-Driven Vulnerability Verification to Blocking Hacks

As AI-driven hacking automates vulnerability discovery, attack-path design, and intrusion attempts, enterprise security teams face growing pressure. Piolink proposes a multi-layered defense: its agentic AI-based CTEM platform "BlueHunter" verifies real exploitability to set priorities, its web firewall "WebFront-K" blocks automated attacks in real time, and 24-hour security monitoring tracks attack continuity. The company said BlueHunter found 28 undisclosed vulnerabilities in 10 Linux open-source services and one CMS, with two assigned CVE numbers and disclosure planned for December.

SecurityITmedia

GMO to Provide New PCs to Customers Hit by Ransomware; Criminal Group Reportedly Publishes One Customer's Data

GMO Internet Group announced it will provide replacement PCs with equivalent performance to customers whose PCs were hit by ransomware through unauthorized access to "お名前.com デスクトップクラウド." The company said that as of 11:59 a.m. on October 27, no ransomware or other malware had been confirmed on devices already collected and analyzed, while the criminal group published what it claimed was one customer's personal information, which GMO said may contain inaccurate content and urged people not to access or spread it.