[paquet]

My guess is the sales person added the car to your account.
For that, they need an email address though, as far as I know.

Or... you've found a rather serious security vulnerability