CarMax data breach (2026)
In January 2026, data allegedly sourced from US automotive retailer CarMax was published online following a failed extortion attempt. The data included 431k unique email addresses along with names, phone numbers and physical addresses.
- Victim
- CarMax
- Records
- 431.4K