PHP Vulnerability Responses by Company

Nippon Rent-A-Car Service

Companies / web services
Aliases / services
ニッポンレンタカー / NRアプリ / ニッポンレンタカーサービス株式会社 / Nippon Rent-A-Car Service / 日本租车服务
Official website
https://www.nipponrentacar.co.jp/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Nippon Rent-A-Car app: incident discovered 29 September

Response status
Not listed
Response information checked
2026-10-30

Current re-audit: official_incident_notice · Research date: 2026-10-30

A separate attack on 19–21 September 2026 accessed 55 member pages. Contacts and booking history, and for some users licence information and the last four card digits, may have been viewed. This differs from the first incident reported on 26 September.

Scope: A PHP connection and response to the current PHP vulnerabilities are not listed.

What users should do

Check individual notices. Do not follow suspicious links or enter information; the company says it does not request passwords or card details by messages.

Official service URL

Source URLs

  1. 2026-10-01: official service noticehttps://www.nipponrentacar.co.jp/info/202610_2.htmlService and operation documentation
Related official sources
  1. Official operator identityOfficial information directoryIdentifies Nippon Rent-A-Car Service as the operator.
  2. 2026-10-01: official service noticeOfficial notice; link to this PHP incident unconfirmedVerifies affected data, service scope and user guidance.

Comments