Breachesby GlyphCarGurus
Disclosed Feb 22, 202612,461,887 accountsUnverified
ShinyHunters leaks 12.4 million CarGurus account records
ShinyHunters published a 6.1 GB archive it said came from CarGurus, and Have I Been Pwned loaded 12.4 million records including contact details and finance pre-qualification data. CarGurus did not publish a statement.
What is known
| People affected | 12,461,887 (accounts in the leaked data, per Have I Been Pwned) |
|---|---|
| Disclosed | Feb 22, 2026 |
| Happened | Feb 14, 2026 |
| Attack | Extortion |
| Data exposed | EmailsIP addressesNamesPhone numbersAddressesFinancial |
| Sector | Tech · US |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
| Check your email | Have I Been Pwned |
Sources
Notices filed
History of this record
aggregator to pressby seedSource
https://haveibeenpwned.com/Breach/CarGurus to https://www.bleepingcomputer.com/news/security/cargurus-data-breach-exposes-information-of-124-million-accounts/by seedSource
empty to USby seedSource
["emails","ip-addresses","names","phone","addresses"] to ["emails","ip-addresses","names","phone","addresses","financial"]by seedSource
In February 2026, the automotive marketplace CarGurus was the target of a data breach attributed to the threat actor ShinyHunters . Following an attempted extortion, the data was published publicly and contained more than 12M email addresse to ShinyHunters published a 6.1 GB archive it said came from CarGurus, and Have I Been Pwned loaded 12.4 million records including contact details and finance pre-qualification data. CarGurus did not publish a statement.by seedSource
empty to ShinyHunters leaks 12.4 million CarGurus account recordsby seedSource
First recordedby backfillSource
First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.