Park24 to pay ¥3,000 to Times Car users hit by data breach

According to The Japan Times, the company has confirmed that about 6.62 million user accounts were compromised.[1] The paper reports that about 1.46 million accounts from which images of identification documents, including driver's licenses, were externally transferred[1] will be eligible for the payment.MLex reports that Park24 said a forensic investigation found that a vulnerability in its Times Car web system was exploited[2]. MLex adds that about 892,000 more images were accessed but not transmitted.[2]Nikkei Asia reports that Park24 detected unauthorized access into the systems of its Times Car car-sharing service in September.[3] The Japan Times reports that Park24 added that the affected images were not immediately viewable because they were encrypted.[1]Park24 told The Japan Times on Friday that it will respond appropriately on a case-by-case basis if actual damage occurs.[1] According to the same report, the total cost of the consolation payment is expected to be some ¥4.4 billion.[1] The paper also reports that the company plans to book an extraordinary loss of ¥5.5 billion for the year ending this month[1], which covers other costs from the breach as well.According to MLex, Park24 said it has secured the intrusion route and plans further security and governance measures by year-end.[2]The420.in reports that a lawyer representing affected customers described the proposed amount as insufficient and indicated plans for legal action.[4]