CarGurus data breach
12,461,887 accounts exposed.
Check whether your email is included on Have I Been Pwned.
What was exposed
Email addressesIP addressesNamesPhone numbersPhysical addresses
What to do
- Expect more phishing emails that mention this service. Do not click links in them; go to the site directly.
- Be wary of texts and calls that seem to know your details.
- Turn on two-step verification wherever it is offered, and use a password manager.
About this breach
In February 2026, the automotive marketplace CarGurus was the target of a data breach attributed to the threat actor ShinyHunters. Following an attempted extortion, the data was published publicly and contained more than 12M email addresses across multiple files including user account ID mappings, finance pre-qualification application data and dealer account and subscription information. Impacted data also included names, phone numbers, physical and IP addresses, and auto finance application outcomes.