Following the leak of member information from “Times Car,” it has emerged that a rush of self-notification filings — meant to prevent misuse of leaked driver’s license data — and disclosure requests — meant to check for unauthorized contracts — has overwhelmed credit bureaus CIC and the Japan Credit Information Reference Center (JICC), delaying processing. The leak, which included images of driver’s licenses, was only announced the day before, and the surge appears to reflect users moving preemptively to guard against future misuse. On 5ch, some argued that Times, as the source of the leak, should file the bulk notifications on users’ behalf, while others countered that filing and disclosure are separate procedures and companies have no obligation to act as an intermediary — and still others argued that even without a self-notification, victims of unauthorized contracts should be exempt from liability because of the lender’s inadequate screening, leaving reactions split over how effective the response really is.
Credit bureaus CIC and the Japan Credit Information Reference Center (JICC) announced on September 29 that a surge of self-notification and disclosure requests via the internet and smartphone apps has caused delays in processing.
The previous day, “Times Car” disclosed a large-scale data leak that included images of driver’s licenses. It appears people worried about their own license information being leaked are responding by filing self-notifications to guard against future misuse, or by requesting disclosure to check whether cards or loans have been fraudulently taken out in their name.
IT media NEWS September 30, 2026, 09:54 AM
Source: itmedia.co.jp / Original article here
It'll just end up as a 'filed' (that actually wasn't) situation.
They're not obligated to do that.
That's a disclosure request, not a self-notification filing.
Why's that company acting like the victim here?
If a company can be this sloppy, you can bet there's equally sloppy lenders out there too.
Because you actually can get a loan with it.
Someone tell me, this is scary.
Are you gonna whip out your old pre-renewal license if you get pulled over at a checkpoint? Calm down a second.
Get married and change your name, or move and change your address — unless the basic info actually changes, renewing doesn't help.
I like that theory lol
This is causing a huge headache for everyone.
That's scary too. If you report it lost, your license number changes, so at least you can say it's a different number now — though only the last couple digits of the 12-digit number actually change.
The cost just gets spread around and diluted across the whole population in the end lol
Just use your license… lol (the very thing that got leaked)
Maybe some stranger's already done it in your name lol
Way too many companies hang onto former members' data. When I canceled DAZN it showed something like 'you can easily come back to the same account anytime' and it creeped me out. Stop storing addresses, phone numbers, emails, and credit card info.
There are all sorts of laws requiring data to be kept for like 10 years, so it's also a hassle to delete only the unneeded parts once the time comes. Probably easier to just mark it 'withdrawn' in the database and keep the data forever.
Note: Keeping former members' personal data for 10 years isn't uniformly required by the Act on the Protection of Personal Information, but in practice it's often justified by the statute of limitations on claims under the Civil Code or preservation obligations under tax law.
• Civil Code (extinctive prescription of claims): Contractual rights generally expire after 10 years (or 5 years from when the right becomes exercisable), so data is kept as proof in case of disputes or re-contracting.
• Corporate Tax Act (loss carryforward, etc.): Books and records must be kept for 10 years when claiming a net-operating-loss carryforward.
Well, keeping transaction records — including for former members — for 7 years is required by law.
Maybe rewrite the address field and use it for trading/selling accounts lol
If you're fine with rewriting that field in the first place, why not just swap out the photo and the license number too?
A license probably won't work unless the photo matches your face. Though you might get some shady visitor showing up at a wealthy elderly person's address, or at some good-looking young person's place — there's various ways to misuse it.
Does that mean you can just keep your My Number Card as-is?
Weren't you handed a printed slip with it on the spot? Though I feel like that number almost never actually gets used. I looked into it before and found out it's needed to enter US military bases.
On entry procedures using your driver's license (Camp Zama)
https://americantown.co.jp/79/
① Enter the 8-digit PIN (two sets of 4 digits) you set when renewing your license. You should have set this yourself at renewal.
What's the "printed data slip" that US forces in Japan require in addition to the driver's license?
https://response.jp/article/2017/03/28/292737.html
This printed data slip can be pulled up by the license holder themselves from a dedicated terminal, using the 4+4 digit PIN they set when renewing their license.
In Atsugi City, Kanagawa (home to Naval Air Facility Atsugi), Atsugi Police Station handles this too.
Apparently some rental car procedures require that PIN. Stores that don't support it are just refusing My Number licenses outright.
I used my license password for something recently… now what was it again.
any debt taken out without your knowledge gets waived.
Who compensates for the damages, then?
You're exempt even without filing — it's the lender's screening failure, not yours.
Congrats on finally breaking your streak of 'no girlfriend for as many years as I've been alive'!
FYI: your driver's license number doesn't change [when you change your name].
Background and key points of this story
CIC and JICC are designated credit bureaus that manage the personal credit information used to screen credit card and loan applications; the system handles two separate procedures — a “self-notification” for people who want to prevent contracts being taken out in their name without consent, and a “disclosure request” for those who want to check whether any unauthorized contracts already exist. Because the Times Car leak announced the previous day included images of driver’s licenses, it appears a flood of applications came in from users worried about identity-theft contracts. On the forum, some argued Times should handle the bulk filing on users’ behalf, while others pointed out that self-notification and disclosure are separate systems and companies have no obligation to act as an intermediary — leaving opinions split. Some also argued that regardless of whether a self-notification was filed, liability for unauthorized contracts falls on the lender for inadequate screening and is therefore waived — a point not covered in the original article, and one readers could easily get the wrong idea about.
*This article is excerpted and summarized from the 5ch (News Express+) thread ‘Rush of Fraud-Prevention Filings Delays Processing at CIC/JICC, Right After the Times Car Data Leak‘.
