Bleepingcomputer
CarGurus Data Breach Exposes 12.4 Million Accounts
First seen 24 Feb 2026, 19:11 UTC
•



+4
•43.2
Export
Article Content
Browse articles
The ShinyHunters extortion group published personal information from over 12 million records allegedly stolen from CarGurus, a digital auto platform. The breach includes sensitive data from both personal and corporate accounts, significantly impacting users of the service.
Analyzing cluster data...
Referenced clusters:
Something went wrong. Please try again.
Timeline
2026-02-21
ShinyHunters published data archive containing 12.4 million records
2026-02-21
Initial report of 1.7 million records stolen by ShinyHunters
2026-02-24
Bleepingcomputer reports on the breach and its scale
More articles in this cluster
Continue Reading
Critical RCE Vulnerability in Oracle PeopleSoft Exploited by SHADOW-AETHER-015
ShinyHunters Exploits Oracle PeopleSoft Zero-Day Vulnerability
Coordinated Cyberattack Disrupts Water Utilities in Minnesota
2026 Cyberattacks Target Critical Infrastructure and Data Breaches
Critical Vulnerabilities and Exploits Targeting Cisco, Canvas, and Microsoft Systems
LVMH Brands Fined 36 Billion Won for Salesforce Data Breaches