dealers.cargurus.com 2026 Cyberattacks Target Automotive Sector: CarGurus Breach and Vendor Incident
Article Content
- •CarGurus experienced a data breach due to vishing attacks, affecting over 12.4 million records.
- •The Everest ransomware group exploited a vendor's weak FTP credentials, impacting Nissan and Infiniti dealerships.
- •Both incidents emphasize the importance of securing third-party vendor connections in the automotive sector.
In 2026, the automotive retail sector experienced significant cyberattacks, including a breach at CarGurus and a vendor incident affecting Nissan and Infiniti dealerships. The CarGurus breach, attributed to the ShinyHunters group, involved vishing attacks that led to the exfiltration of 6.1 gigabytes of data, impacting over 12.4 million records, although sensitive data was reportedly limited. The vendor incident involved the Everest ransomware group exploiting weak FTP credentials without multi-factor authentication, affecting a third-party vendor connected to Nissan and Infiniti. Both incidents highlight the vulnerabilities within the automotive supply chain and underscore the need for enhanced cybersecurity measures. CarGurus has since confirmed that their systems remain operational and that no sensitive dealer information was compromised. The investigations into both incidents have been corroborated by independent cybersecurity firms.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (3)
Following this threat?
Track Everest and CarGurus in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
FlyDubai Ransomware Attack Exposes Sensitive Data and Boeing Code The Everest ransomware gang claims to have exfiltrated 4.36GB of data from FlyDubai, including personal records of 2,862 employees and Boeing proprietary source code. The stolen data reportedly includes pilot training materials and operational directives, with some files marked as 'Boeing Proprietary, Confidential… 
Asus eShop Data Breach Exposes Customer Order Information Asus has confirmed a data breach affecting its online store, where unauthorized access to customer order information occurred. The breach, disclosed via email to customers, revealed that details such as names and order records may have been accessed, although no financial information was compromised. Asus stated that…