Personal Data Leak Monitor

CarMax data breach

431K accounts from CarMax (carmax.com) were exposed in this breach. Besides email addresses, it included names, phone numbers and physical addresses.

Breach date
January 24, 2026
Accounts
431,371
Added to the database
February 20, 2026

Was your email address in this breach?

Check if your email has leaked

We display where your address leaked and what went with it. We never store the address.

We don't store your address. It is checked right here against about 1029 breaches, including this one.

What leaked

Email addressesNamesPhone numbersPhysical addresses

What to do now

  1. Do not tap links in emails claiming to be that service
  2. Expect scam emails that use your real name
  3. Be alert to fake delivery or unpaid-bill texts and calls
  4. Be careful with unexpected mail or visitors

Tools that help with this breach

Norton 360PaidVisit the official site →(opens in a new tab)ESETPaidVisit the official site →(opens in a new tab)

About this breach

In January 2026, data allegedly sourced from US automotive retailer CarMax was published online following a failed extortion attempt. The data included 431k unique email addresses along with names, phone numbers and physical addresses.

Source: Have I Been Pwned (CC BY 4.0)

Similar breaches from the same period