Data breach
CarMaxcarmax.com
431 371 accounts exposed in a breach dated 2026-01-24.
Breached2026-01-24Added to HIBP2026-02-20 UTCUpdated by HIBP2026-02-20 UTCAccounts431 371Domaincarmax.com
Verified
What happened in Have I Been Pwned’s words
In January 2026, data allegedly sourced from US automotive retailer CarMax was published online following a failed extortion attempt. The data included 431k unique email addresses along with names, phone numbers and physical addresses.
Exposed data as HIBP classifies it
- Email addresses
- Names
- Phone numbers
- Physical addresses
How HIBP qualifies it
- HIBP verified that the data came from this service.
Source: Have I Been Pwned (CC BY 4.0)
Copied from HIBP 2026-11-05 03:50 UTC