Park24: Japan's privacy regulator urges basic data-security measures amid breach surge

Japan’s Data Regulator Calls for Stronger Security Measures After Major Breach at Park24

Japan’s data-protection regulator has issued a warning to businesses, urging them to strengthen basic cybersecurity practices including the deletion of unnecessary personal data following a sharp rise in cyberattacks and data breaches. The advisory comes in response to a recent incident at Park24’s car-sharing subsidiary, which exposed sensitive identification documents tied to approximately 1.6 million accounts.

The breach, disclosed in October 2026, compromised images of driver’s licenses and other ID documents, highlighting vulnerabilities in corporate data storage and retention policies. Authorities have not yet disclosed the cause of the breach, but the incident underscores growing concerns over inadequate security measures in Japan’s digital infrastructure.

The regulator’s appeal reflects broader efforts to enforce stricter compliance with data protection laws, as cyber threats continue to escalate across industries. Businesses are now under increased pressure to audit their data handling practices and implement stronger safeguards to prevent similar exposures.

Source: https://www.mlex.com/mlex/data-privacy-security/articles/2538206/japan-s-privacy-regulator-urges-basic-data-security-measures-amid-breach-surge

パーク二四（株） cybersecurity rating report: https://www.rankiteo.com/company/パーク二四（株）

"id": "パーク1792052997",
"linkid": "パーク二四（株）",
"type": "Breach",
"date": "10/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '1600000',
                        'industry': 'Car-sharing',
                        'location': 'Japan',
                        'name': 'Park24’s car-sharing subsidiary',
                        'type': 'Subsidiary'}],
 'data_breach': {'file_types_exposed': ['Images'],
                 'number_of_records_exposed': '1600000',
                 'personally_identifiable_information': 'Driver’s licenses and '
                                                        'other ID documents',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': 'Identification documents'},
 'date_publicly_disclosed': '2026-10',
 'description': 'Japan’s data-protection regulator issued a warning to '
                'businesses to strengthen cybersecurity practices after a '
                'breach at Park24’s car-sharing subsidiary exposed sensitive '
                'identification documents tied to approximately 1.6 million '
                'accounts. The breach compromised images of driver’s licenses '
                'and other ID documents.',
 'impact': {'data_compromised': 'Images of driver’s licenses and other ID '
                                'documents',
            'identity_theft_risk': 'High'},
 'post_incident_analysis': {'root_causes': 'Vulnerabilities in corporate data '
                                           'storage and retention policies'},
 'recommendations': 'Strengthen basic cybersecurity practices, delete '
                    'unnecessary personal data, audit data handling practices, '
                    'and implement stronger safeguards',
 'references': [{'source': 'Japan’s data-protection regulator'}],
 'regulatory_compliance': {'regulatory_notifications': 'Japan’s '
                                                       'data-protection '
                                                       'regulator issued a '
                                                       'warning'},
 'stakeholder_advisories': 'Businesses urged to strengthen cybersecurity '
                           'practices',
 'title': 'Major Data Breach at Park24’s Car-Sharing Subsidiary',
 'type': 'Data Breach'}