Data breach

CarGuruscargurus.com

12 461 887 accounts exposed in a breach dated 2026-02-14.

Breached2026-02-14Added to HIBP2026-02-22 UTCUpdated by HIBP2026-02-22 UTCAccounts12 461 887Domaincargurus.com

Verified

What happened in Have I Been Pwned’s words

In February 2026, the automotive marketplace CarGurus was the target of a data breach attributed to the threat actor ShinyHunters. Following an attempted extortion, the data was published publicly and contained more than 12M email addresses across multiple files including user account ID mappings, finance pre-qualification application data and dealer account and subscription information. Impacted data also included names, phone numbers, physical and IP addresses, and auto finance application outcomes.

Exposed data as HIBP classifies it

Email addresses
IP addresses
Names
Phone numbers
Physical addresses

How HIBP qualifies it

HIBP verified that the data came from this service.

Source: Have I Been Pwned (CC BY 4.0)

Copied from HIBP 2026-11-05 03:50 UTC