verified2026-01-24
CarMaxCarMax breach
carmax.com · 431,371 records compromised
Records
431K
Breach date
2026-01-24
Domain
carmax.com
Data classes
4
Description
In January 2026, data allegedly sourced from US automotive retailer CarMax was published online following a failed extortion attempt . The data included 431k unique email addresses along with names, phone numbers and physical addresses.
Compromised data classes· 4
Email addressesNamesPhone numbersPhysical addresses
Related by meaning· 6
Nearest entities by semantic similarity across the cs-graph corpus.