Recruit says up to 3.7 million records may have been exposed

Recruit said unauthorized access may have exposed up to 3.7 million records from systems linked to Car Sensor, its used-car information site, and C-MATCH, a service for dealerships in Japan.

The possible exposure includes information on people who contacted dealerships or posted reviews, dealership records, and details about some workers and business partners.

Payment details and login passwords were not included, according to Recruit.

Nissan and Mitsubishi temporarily stopped their official used-car search sites because they used the affected Recruit system.

Mazda also stopped updating vehicle listings, so some cars that have already sold may still appear.

Recruit is investigating the cause and scope and says it will contact affected people individually.

As of October 21, no secondary harm had been confirmed, but Recruit warned people to be cautious of suspicious emails, text messages and attachments.