> CarMax - 431,371 breached accounts
[DATE: 20/02/2026 03:48]
[LANGUAGE: EN]
In January 2026, data allegedly sourced from US automotive retailer CarMax was published online following a failed extortion attempt. The data included 431k unique email addresses along with names, phone numbers and physical addresses.