EXPLORINEER
en

JP — ITmedia

Times Car to Pay ¥3,000 Condolence Payments to 1.46 Million Users Affected by Driver's License Image Leak; ¥5.5 Billion Special Loss Booked

Security4 min read

Park24, the parent company of Times Car sharing service, will pay about 3,000 yen to some users after a personal data leak. The leak involved images of driver's licenses and other ID documents.

Compensation for a data leak

Park24 said on October 23, 2026 that it will give 3,000 yen worth of cash or gift vouchers to some users of Times Car. Hackers got into image files of ID documents, such as driver's licenses. The company says it saw signs that the files were sent out of its system. It has not yet decided the exact details or how the money will be given. It will tell each person directly once the plan is set.

Key numbers

  • 1,464,800 ID image files are covered by the payment.
  • About 5.5 billion yen (about 55 億円) will be booked as a one-time loss to cover the costs.
  • The company cut its full-year net profit forecast from 44 billion yen to 38.5 billion yen.
  • About 6.6 million account records were leaked, as reported on September 28.
  • The leak at Times Club also included 135,436 partner-service IDs and 19,510 Times Club card numbers.

What went wrong

The hacking was found on September 25. Leaked account data included names, addresses, birth dates, phone numbers, email addresses, and driver's license details. A later check found that Times Club, the member service, also leaked data. The company says a weakness in the web system was used by the attackers. The images were stored for members' time and for seven years after they quit. Park24 will now delete ID images soon after registration is complete, and it will delete the images it still holds by the end of October.

Why it matters

Millions of people may have had their personal data exposed, including identity documents that can be misused. Park24 says the images are encrypted, so they cannot be read right away. But it admits that future decryption cannot be fully ruled out, which is why it chose to pay. The story also shows the risk of keeping sensitive data for long periods.

What to watch

  • Details of the 3,000 yen payment and how users will receive it.
  • Whether more users are affected as the investigation continues.
  • Possible class-action lawsuits, as reports say more than 2,000 people have said they want to join one.
  • Park24's final results and whether the one-time loss changes its forecast again.

Glossary

Park24
A Japanese company that runs parking and car services, and is the parent of Times Mobility.
Times Car
A car-sharing service where people rent cars by the hour or minute.
Times Club
Park24's member service for Times users, with its own web system and card numbers.
Security전자신문

Tioli Releases Emergency Response Guide for 'Node2Shell'

Tioli said on the 26th that it had independently reproduced and verified the Node.js vulnerability 'Node2Shell (CVE-2026-111497)', disclosed on the 21st, and published a response guide. The flaw stems from a memory-handling error when decompressing Brotli-compressed data, and Node.js rates its severity as High. Patched versions 22.23.4, 24.22.1, and 26.12.1 were released.

SecurityVnExpress

The Privacy Risks of "Always-Listening" AI Devices

AI-enabled devices such as smart speakers, smartwatches and smart glasses that are always ready to respond can collect data, raising privacy concerns. Global shipments of AI glasses reportedly jumped to 8.4 million in 2025 from 2.1 million in 2024, according to Omdia data cited by Reuters. Experts warn that bystanders may be monitored without owning any device, and that AI can interpret far more collected information than earlier voice assistants.

Security전자신문

Election Deepfakes Up 27% Worldwide; South Korea Ranks Third in Cumulative Cases

Reported AI-generated election deepfakes surged worldwide, with January to September 2026 cases already exceeding last year's full-year total by 27%, according to a Surfshark study. South Korea ranks third globally in cumulative cases with 16 since 2021, behind the United States and India. The study counted 235 cases across 46 countries from January 2020 to September 2026.