Times Car Rental says data breach affected 6.6 million accounts

The Japan Times reports that the 6.6 million accounts breached in the hack were of both current and former Times Car and Times Business Service members.[1] Japan Cyber Watch reports that the affected accounts also include former members and people who applied but never completed sign-up.[2]According to Beinsure, Times Mobility said around 1.6 mn documents were accessed during the incident.[3] Beinsure reports that these included utility bills showing home addresses and student IDs[3] and that driver's license images containing personal photographs were also accessed.[3]BleepingComputer reports that the company said passwords were stored in "a form that cannot be restored,"[4] and that the investigation confirmed that credit card information remained unaffected.[4] BleepingComputer also says there is no evidence that the stolen data has been distributed online.[4]Parent company PARK24 said in a statement quoted by The Japan Times: "An external specialist is conducting a forensic investigation to determine the cause and scope of the incident."[1] It added that it was "reporting the incident to the Personal Information Protection Commission and the police."[1]According to The Japan Times, data security experts say the leak of personal photos is unusual[1] and could open the door to identity theft. Beinsure reports that the Credit Information Center said Tuesday that heavy demand was making it difficult for customers to immediately complete identity verification[3].Times Mobility has also urged users to be wary of emails, phone calls and other messages impersonating the company[1], The Japan Times reports.