More than 3.1 million of the affected customers are in the United States, while the remainder are in Canada.
The automaker said that a set of sales and marketing data used between 2014 and 2019 was compromised online at an unknown time between August 2019 and May 2021.