Times Car confirmed 6.6 million member accounts were breached, exposing names, addresses, dates of birth, phone numbers, and driver's license images. Passwords were hashed; card data was untouched. The real risk is a follow-up call or email using those real details to sound legitimate.