CarMax
CarMax
mediumHave I Been Pwned
Disclosed
January 24, 2026
62 days ago
Records
431.4K
Confirmed
Root Cause
Unauthorized Access
Industry
Retail
Description
In January 2026, data allegedly sourced from US automotive retailer CarMax was published online following a failed extortion attempt. The data included 431k unique email addresses along with names, phone numbers and physical addresses.
Exposed Data Types
Exposed Data
Email AddressesPhone NumbersPhysical AddressesNames