Recruit Carsensor and C-MATCH possible data breach
Add to my breach checkMade public · 3,709,551 records at most
What leaked9
Hard to replace
- Bank account number
- Mobile number
- Home or delivery address
- Email address
- Other profile data
- Username
Permanent
- Full name
- Gender
- Partial date of birth or age
- Bank account numberdirect-debit account details of sole-proprietor dealers
- Mobile numberphone and fax numbers of 799 Carsensor users and of dealer contacts · the notice does not say mobile or landline
- Home or delivery addressfor Carsensor users mostly city or ward only; up to 447,670 records may hold a full street address; business addresses of sole-proprietor dealers
- Email address799 users who contacted a dealer, 4 reviewers, and staff and partners
- Gender33,247 Carsensor users
- Other profile datainquiry contents · 33,247 + 799 users; dealers' second-hand dealer licence number and licence holder; an internal management ID in every record
- Partial date of birth or ageage band, 33,247 Carsensor users
- Usernamelogin IDs of C-MATCH dealers, staff and partners
To-dos3 · about 30 min in all
What happened next5 events
- UndetectedNone on record
- Response 5 eventsNo individual notice on record · show events
- RemedyNone on record
- PenaltyNone on record
- DisputesNone on record
- Opened a dedicated inquiry page
- Announced that up to 3,709,551 records may have leaked
- Suspended all Carsensor-related services including the app and C-MATCH
- Detected suspicious access to Carsensor-related systems
- Sent a preliminary report to the Personal Information Protection Commission
- Company
- Recruit Co., Ltd.
- Company detected it
- Made public
- Notice
- Possible leak
- Affected
- 3,709,551 records at most · 3,210,421 Carsensor users who contacted a dealer, 5,289 reviewers, 483,168 C-MATCH dealer records, 10,673 staff and partners
Sources
- リクルート company notice (opens in a new tab)checked October 23, 2026