Times Car confirms breach affecting 6.6 million accounts

Times Car said on 25 September that a third party had entered its systems earlier in the month. It blocked the unauthorised access on 26 September while it checked whether member information had been taken.

The company then said the incident affected about 6.6 million current and former members, including people using its Times Business Service corporate account programme. The report covered both private and corporate accounts.

Times Car said the exposed records included names, department names for corporate members, addresses, dates of birth, telephone numbers, email addresses, driving licence information, identity verification documents, account passwords and linked service IDs. It said the passwords were held in a form that could not be restored.

The company said credit card information had not been affected and it had found no evidence that the stolen data was circulating online. It said it was carrying out forensic work with an outside specialist and would notify affected customers in stages.