The exact contents of the leaked data and other technical specifics have not been detailed in the disclosure, so members should avoid assuming which fields were exposed until Times Car publishes a fuller advisory. What is clear is the scale: 6.6 million accounts is a substantial population, and affected users should treat any credential reuse as a real risk.

Recommended precautions for anyone with a Times Car account:

• Change your Times Car password immediately, and avoid reusing it anywhere else.
• If you used the same credentials on other services, reset those too and enable multi-factor authentication where available.
• Watch for phishing emails or SMS messages referencing Times Car, especially those asking you to "verify" account details or payment information.
• Monitor for unusual activity on any payment method linked to your account.

No specific CVE ID or advisory identifier has been attached to this incident in the reporting. XploitLK will update this thread if the company releases further technical details or a formal breach notification.

Source: BleepingComputer

Did you or your organization have a Times Car account, and if so, have you already rotated credentials and reviewed linked payment methods?