In January 2026, data allegedly sourced from US automotive retailer CarMax was published online following a failed extortion attempt. The data included 431k unique email addresses along with names, phone numbers and physical addresses.

CarMax
https://haveibeenpwned.com/Breach/CarMax

In January 2026, data allegedly sourced from US automotive retailer CarMax was published online following a failed extortion attempt. The data included 431k unique email addresses along with names, phone numbers and physical addresses.
Fri, 20 Feb 2026 03:48:30 Z

Source: HaveIBeenpwned
Source Link: https://haveibeenpwned.com/Breach/CarMax