CarGurus data breach affects 12.5 million accounts

Car marketplace CarGurus was the target of a data breach in which the names, email addresses, phone numbers and physical addresses of millions of customers were stolen.

Have I Been Pwned, a data notification site provider by security researcher Troy Hunt, reported this 12.5 million CarGurus accounts It was hacked in a data breach.

CarGurus, founded in 2006, operates an online marketplace that allows customers to buy, sell and finance vehicle purchases.

The Have I Been Pwned website attributed the hack to the hacking group ShinyHunters.

The ShinyHunters group is known for their social engineering skills, such as calling help desks and pretending to be employees who need their password reset. Hackers used their social engineering skills to steal large amounts of data from them Many universitiesmore Billion records From Salesforce customers, including Google and Work dayand claimed recent breakthroughs in Pornhub and The giant form of fintech lending.

TechCrunch has reached out to CarGurus for comment and will update this article if the company responds.

The customer data released included user account ID mappings, financing pre-qualification order data, dealer account and subscription information, according to Have I Been Pwned.

This is the second car-related data breach reported by Have I Been Pwned this year. Last month, alleged data from CarMax was made public after a failed extortion attempt. The data breach notification website reported. The data breach involved approximately 431,000 unique email addresses along with names, phone numbers and physical addresses.