リクルート（カーセンサーnet、C-MATCH）Data breach / unauthorized access incident
- Occurred on
- October 17, 2026
- Announced on
- October 21, 2026
- Severity
- SSLarge-scale compromise of sensitive data such as payment or identity-verification records affecting millions.
- Scale
- 3,709,551 records
- Main impact
- Due to unauthorized external access, up to 3,709,551 personal and business records from 『カーセンサーnet』 and 『C-MATCH』 inquiries and dealer registrations may have been leaked. This includes inquiry user information (3,210,421 records) and dealer registration information (483,168 records), containing names, addresses, phone numbers, email addresses, login IDs, and antique dealer license numbers, etc.; login passwords and credit card information are said to be excluded, but some sole proprietors' direct-debit account information may be included. Investigation into the cause and scope is ongoing.
- Information involved
- Full nameHome addressPhone numberEmail addressUser / member IDIdentity verification data
- Cause / key point
- Compromise from unauthorized external access by a third party (possible information leakage)
- Industry
- Services & other
- Last updated
- October 22, 2026
Is this incident worth paying attention to?
Written & reviewed
Reviewed byYutaro SasaoFounder & CEO, MediaLeap Inc.
CEO of MediaLeap Inc. Working on both sides of web advertising and web media since 2013; founded the company in May 2025.
Review scope: cross-checking against primary sources (official and government announcements), verifying claims stay within the facts, and checking source attribution。Last reviewed:
Written by:Leak Watch editorial team (AI-assisted drafts verified against sources by the editorial team) · Reviewer profile · Request a correction
Related incidents
Browse the database →Incidents sharing the same company, service, attack method or industry (grouped automatically from the disclosures).
Other incidents at リクルート
Incidents related to "クレジットカード"
Incidents where the damage spread through the same service or system.
- A株式会社日建学院（事前確認講習システム） / （公財）マンション管理センター2026.10.20 announced・Affected 3,597 people
- Aニフティ（回線申込・受付管理システム）2026.10.19 announced・Affected 542,513 records
- Bデーリー東北新聞社（受注制作Webページ）2026.10.16 announced・Affected 423 records
- SSバーガーキング・ジャパン(公式アプリ)2026.10.15 announced・Affected 11,180,000 records
- SSソースネクスト2026.10.15 announced・Affected 22,519,960 records
- SSSアドベンチャー（スカイチケット）2026.10.10 announced・Affected 14,640,000 records
Incidents related to "ログインパスワード"
Incidents where the damage spread through the same service or system.
Same attack method
- Bユミルリンク（メール配信システム）2026.10.19 announced・Affected 9,000,000 records
- SSタイムズカー(タイムズモビリティ)2026.09.25 announced・Affected 6,600,000 accounts
- Sブックオフグループ(ブックオフコーポレーション)2026.10.09 announced・Affected 6,383,279 people
- Sヤマト運輸(クロネコ代金後払いサービス)2026.09.29 announced・Affected 5,310,000 records
- Aビューカード（VIEW’s NET）2026.10.09 announced・Affected 4,030,000 records
- S2りんかんイエローハット2026.06.19 announced・Affected 3,180,000 people
Same industry
- S日本郵政（ゆうID・ゆうゆうポイント）2026.10.19 announced・Affected 249 accounts
- S第一興商（ビッグエコー等）2026.10.08 announced・Affected 8,631,000 records
- Sセレス（ポイントインカム）2026.10.07 announced・Affected 195 records
- Sエバーグリーン・マーケティング（メール）2026.10.06 announced・Affected 763 records
- Sチケットプラス（チケプラ）2026.10.01 announced・Affected 107 people
- SEPARKリラク&エステ（PeakManager）2026.09.24 announced・Affected 22,180,000 records
Attack method classification: Unauthorized access (method undisclosed)(Breached, but the technique was not identified or disclosed)
Read the Unauthorized access (method undisclosed) guide and national trends →