Major CarGurus data breach reportedly sees 1.7 million corporate records stolen

• CarGurus reportedly hit by ShinyHunters vishing attacks
• Hackers claim to have stolen 1.7 million records
• CarGurus is staying queit for now

Online car marketplace CarGurus is allegedly the latest company to fall prey to ShinyHunters’ vishing attacks.

The notorious hacking collective posted a new note on its data leak site warning CarGurus to act quickly or have their sensitive data posted on the dark web.

"This is a final warning to reach out by 20 Feb 2026 before we leak along with several annoying (digital) problems that'll come your way," ShinyHunters apparently wrote in its announcement. The group says it stole personally identifiable information (PII) and “other internal corporate data,” totaling 1.7 million records.