> JapanHacked_
[Contained][Severity: Major][Intrusion]

Nippon Rent-A-Car: separate attack on its app

On October 1, Nippon Rent-A-Car Service disclosed a separate attack using a different method, discovered September 29 during investigation of the 41-member incident announced September 26. Member pages of 55 people were accessed September 19–21. Potentially viewed fields include names, phone numbers, emails, login IDs, usage and bookings, plus registered license numbers, addresses, birth dates and last four card digits/cardholder names. Containment measures were implemented. Overlap with the earlier 41-member group was not disclosed.

Disclosed

2026-10-01

Organizations involved

1

Leaked or at risk

55

55

Downtime

Unknown

Timeline

  1. Started 2026-09-19
  2. Detected 2026-09-29
  3. Disclosed 2026-10-01
  4. 12 days

Attack or cause

Method
[Intrusion]
Impact
[Data leak]
Entry point
Unknown

Data exposed or at risk

[Name][Phone number][E-mail address][Postal address][Date of birth][Purchase history][Passwords][Payment card]

Organizations involved

Open in organization search

Sources

  1. [1][Official]NRアプリへの不正アクセスによる会員情報漏えいに関するお詫びとお知らせ（9月29日判明分）Nippon Rent-A-Car Service · 2026-10-01