Home / Incidents / Data breach
CarGurus attack exposes 12.4 million users
Password resets were forced after account records were taken.
- Organisation
- CarGurus
- Disclosed
- 24 February 2026
- Affected
- 12,400,000
- Data
- Account records
- Attacker
- ShinyHunters
- Severity
- critical
- Region
- Global
- Source
- CM Alliance monthly roundup ↗
Cite this
Nuffield Consulting, “CarGurus attack exposes 12.4 million users”, The Daily Tech Wire outage & breach log, 24 Feb 2026. https://techwire.nuffieldconsulting.com/incidents/2026-02-24-cargurus-breach/ (retrieved 15 Nov 2026).
This entry summarises public reporting. Please also cite the original source: CM Alliance monthly roundup, https://securityaffairs.com/188491/cyber-crime/shinyhunters-cyberattack-on-cargurus-impacts-12-4-million-users.html.
Related incidents
- 19 Feb 2026France's national bank account registry breachedFICOBA (France) · breach · Unknown · 1.2M records
- 12 Feb 2026Odido breach exposes 6.2 million Dutch customersOdido · breach · Unknown · 6.2M records
- 1 Feb 2026Panera data on 5.1 million accounts leakedPanera Bread · breach · ShinyHunters · 5.1M records
- 24 Feb 2026Wynn Resorts employee data stolenWynn Resorts · breach · ShinyHunters
- 18 Feb 2026Fintech Figure files stolen, nearly a million customers affectedFigure Technology · breach · ShinyHunters · 1M records