Times Car data breach

What leaked11

• ID card imageencrypted images of ID documents such as driving licences: sent out for 1,464,800 accounts, accessed but with no sign of being sent out for 891,602; the company says a future decryption cannot be fully ruled out
• Driver's licence numberdriving licence information · the notice does not list its fields
• Password4 accounts, hashed
• Mobile numberphone number · the notice does not say mobile or landline
• Partial card numberlast four digits of the card number, 28 Times Club records; the company does not hold full card numbers or security codes
• Employerdepartment name of corporate members, 3,677 accounts
• Other profile dataTimes Club card numbers · 19,510, linked-service IDs · 135,436 Times Club and 4 Times Car, Times Business card numbers · 113 and 12, Times Car member numbers · 8

To-dos6 · about 1 h 30 min in all

1. Change the leaked password everywhere you reused itabout 30 minfreeStops: account takeover
2. Know the scam pattern: calls and texts that cite these leaked detailsabout 5 minfreeLimits harm from: scam calls, phishing messages
3. Use an authenticator app or passkey instead of SMS codesabout 20 minfreeLimits harm from: account takeover, SMS code theft
4. Turn on instant transaction alertsabout 5 minHelps you notice: scam calls
5. Turn on two-step sign-in for email and bankingabout 15 minfreeLimits harm from: account takeover
6. Remove your address and phone from public profiles and tighten SNS privacyabout 20 minfreeLimits harm from: visits or contact at home