12.5M accounts from CarGurus (cargurus.com) were exposed in this breach. Besides email addresses, it included iP addresses, names and phone numbers.
Was your email address in this breach?
We display where your address leaked and what went with it. We never store the address.
We don't store your address. It is checked right here against about 1029 breaches, including this one.
Email addressesIP addressesNamesPhone numbersPhysical addresses
In February 2026, the automotive marketplace CarGurus was the target of a data breach attributed to the threat actor ShinyHunters. Following an attempted extortion, the data was published publicly and contained more than 12M email addresses across multiple files including user account ID mappings, finance pre-qualification application data and dealer account and subscription information. Impacted data also included names, phone numbers, physical and IP addresses, and auto finance application outcomes.
Source: Have I Been Pwned (CC BY 4.0)