Breaches and incidents
Nippon Rent-A-Car Service: two separate attacks on NR app expose 96 members incl. driver’s licence data
The company said on 26 Sep that 41 members’ data in the Nippon Rent-A-Car app may have been viewed, and on 1 Oct that a different-method attack from 19 to...
- Disclosed
- Verification
- Checked against a primary source
What happened
- The company said on 26 Sep that 41 members’ data in the Nippon Rent-A-Car app may have been viewed, and on 1 Oct that a different-method attack from 19 to 21 Sep (found 29 Sep) hit 55 more members’ pages: name, phone, email, login ID, history and bookings, plus licence number, address, DOB, card last 4 digits and holder name where registered.
- Root cause: not disclosed beyond two distinct methods.
- No attacker named.
- Affected members were emailed and asked to reset passwords; the PPC was notified and police consulted.