Recruit announced on October 21st that up to 3,709,551 pieces of personal information may have been leaked due to unauthorized access to its used car information website "Car Sensor net" and its dealer business support service "C-MATCH". Related services have been temporarily suspended since approximately 5:00 PM on the 17th.
For Car Sensor net, the affected data includes information on 3,210,421 users who inquired with dealerships. The primary data points are names and addresses, with some records also containing inquiry details, age, gender, phone numbers, and email addresses. While addresses are generally limited to city/ward/town/village names, there are also up to 447,670 records that may include more specific details such as street names, house numbers, building names, and room numbers. Additionally, 5,289 records, including the names of review contributors, are also impacted.
Regarding C-MATCH, there is a possibility of a leak of 483,168 records of dealership information. This includes names and phone numbers of representatives/personnel in charge, antique dealer license information, and login IDs. For sole proprietors, it also encompasses business addresses and bank account withdrawal information. Furthermore, 10,673 records, including names, email addresses, and login IDs of Recruit employees (including retirees) and personnel from contractors and sales agencies, are also affected.
Recruit has stated that the compromised information does not include payment details such as credit card information or login passwords.
Made with AI
