Threat Intelligence Brief
Curated summary with source attribution
Source: asahi.com
Threat Risk: Medium
Victim: Times Car (Park24 Co. subsidiary) users
Incident: Large-scale leak of 1.46 million identity verification images.
Impact: Mass exposure of government-issued IDs leading to significant identity theft risks and legal liabilities.
Attacker: Unidentified threat actors
Analysis: The breach involved the leak of 1.46 million identity verification images, including driver’s licenses. A significant contributing factor was poor data retention, as sensitive images were kept for seven years after memberships were canceled. This incident underscores the critical risk associated with over-retaining PII.
Recommendations: Implement strict data retention and deletion schedules for PII; Encrypt identity verification documents at rest; Conduct regular audits of legacy data stores
Source: The Asahi Shimbun
Editorial note: this post summarizes third-party reporting and links to the original source.
View Original Source