Times Car (Park24) breach of about 6.6M accounts, including 1.6M with ID images: Park24 will delete all stored ID images by Oct 31 and stop keeping them
Park24 detected unauthorized access to its Times Car car-sharing web system on Sep 25. ITmedia and Asahi, citing the company's earlier reports, put the leak at about 6.6 million accounts, including former members. About 1.6 million of those included images of identity documents such as driver's licenses, student IDs and proof-of-address papers. On Oct 16 Park24 said it had kept ID images for the whole membership and for 7 years after a member left. It will now delete them as soon as registration is verified, and it will delete every image it currently holds by the end of October, whether or not the member asks. Per-member details of what leaked, which had been promised about two weeks after the Sep 29 report, are now due Oct 23 because the outside investigation is taking longer. Park24 warns members about fake emails, SMS and calls in its name.
Sources: Park24 notice (Oct 16) · ITmedia NEWS (Oct 16) · Asahi via Yahoo! News (Oct 16)