Story perspectives

CarGurus Data Breach Exposes 12.5M User Accounts

2/25/2026

Summary

Story summary

CarGurus, the U.S.-based online automotive marketplace, confirmed a data breach affecting 12.5 million user accounts.
The breach exposed names, email addresses, phone numbers, and physical addresses.
The ShinyHunters hacking group is attributed to the breach.
Suspicious activity on CarGurus' systems triggered its detection.
Users should be cautious of phishing because the online automotive sector relies more on digital platforms.

History

Historical Context

The Equifax data breach, disclosed in September 2017, compromised the personal information of 147.9 million Americans due to a vulnerability in its web server. This incident, one of the largest cybercrimes in history, prompted significant scrutiny of cybersecurity practices. In 2020, the U.S. indicted members of China's People's Liberation Army for their involvement, highlighting ongoing concerns about data security and international cyber threats.

1 of 2

Story summary

CarGurus, the U.S.-based online automotive marketplace, confirmed a data breach affecting 12.5 million user accounts.
The breach exposed names, email addresses, phone numbers, and physical addresses.
The ShinyHunters hacking group is attributed to the breach.
Suspicious activity on CarGurus' systems triggered its detection.
Users should be cautious of phishing because the online automotive sector relies more on digital platforms.

1 / 2