All breaches
CarGurus data breach12.5M accounts compromised on 2026-02-14
Verified
CarGurus (cargurus.com) was the source of a data breach dated 2026-02-14, exposing 12,461,887 accounts. The details below are mirrored from Have I Been Pwned and reflect the source's account of the incident at the time of publication.
Incident Report
| Target Organization | CarGurus |
|---|---|
| Source Name | CarGurus |
| Domain | cargurus.com |
| Breach Date | 2026-02-14 |
| Added to HIBP | 2026-02-22 |
| Accounts Compromised | 12,461,887(12.5M) |
| Data Exposed | Email addressesIP addressesNamesPhone numbersPhysical addresses |
| Status | Verified by HIBP |
Description
In February 2026, the automotive marketplace CarGurus was the target of a data breach attributed to the threat actor ShinyHunters. Following an attempted extortion, the data was published publicly and contained more than 12M email addresses across multiple files including user account ID mappings, finance pre-qualification application data and dealer account and subscription information. Impacted data also included names, phone numbers, physical and IP addresses, and auto finance application outcomes.
Disclaimer
HackerFeeds does not engage in the exfiltration, downloading, taking, hosting, viewing, reposting, or disclosure of any stolen information. All breach data reported here is sourced from publicly available threat intelligence feeds for awareness purposes only.