CarMax
Data Breach on October 06, 2025
| Data Breach Report | |||
|---|---|---|---|
| Victim | carmax.com | ||
| Threat Actor | ScatteredLAPSUSHunters | ||
| Date Discovered | Oct 06, 2025 | ||
| Description | CarMax, Inc. is a used-vehicle retailer and auto financing company based in the USA (Virginia), operating a network of retail locations for buying and selling used cars and offering auto financing to customers. | ||
| Leak Size | 1.7GB |
Credential Exposure for carmax.com
We've indexed 12,979 @carmax.com accounts from external breaches, plus 6,916 credentials for carmax.com itself.
Last checked Aug 16, 2026
| @carmax.com addresses from external breaches | |
|---|---|
| Combo lists | 11,952 accounts · most recent Aug 15, 2026 |
| Third-party breaches | 1,366 accounts · across 142 breaches · 1,290 with a plaintext password · most recent Jan 31, 2026 |
| Passwords for carmax.com accounts | |
|---|---|
| Combo lists | 4,062 logins · most recent Aug 15, 2026 |
| Infostealer logs | 3,098 logins · 2,180 infected devices · most recent Aug 8, 2026 |
Logins may belong to customers or to staff, and the data doesn't say which. None of this is necessarily connected to the ransomware attack above.
Is your organization next?
CarMax was breached. Check if your company's credentials have been exposed in this or other data breaches.
Check your exposure →Continuous dark web monitoring alerts you when we find leaked credentials or session tokens for your company.