CarGurus has yet to acknowledge the incident publicly.SecurityWeekhas emailed CarGurus for a statement about the ShinyHunters’ claims and will update this article if the company responds.While it is unclear how the data was stolen,ShinyHuntersis known for mounting sophisticated voice phishing (vishing) attacks that have compromised numerous organizations.More than 100 organizationswere targeted in a recent ShinyHunters phishing campaign, with some of the latest incidents attributed to the hacking group impactingOptimizely,Figure,Panera Bread, andCrunchbase.Related:Dior, Louis Vuitton, Tiffany Fined $25 Million in South Korea After Data BreachesRelated:ApolloMD Data Breach Impacts 626,000 IndividualsRelated:Under Armour Looking Into Data Breach Affecting Customers’ Email AddressesRelated:750,000 Impacted by Data Breach at Canadian Investment Watchdog

While it is unclear how the data was stolen,ShinyHuntersis known for mounting sophisticated voice phishing (vishing) attacks that have compromised numerous organizations.More than 100 organizationswere targeted in a recent ShinyHunters phishing campaign, with some of the latest incidents attributed to the hacking group impactingOptimizely,Figure,Panera Bread, andCrunchbase.Related:Dior, Louis Vuitton, Tiffany Fined $25 Million in South Korea After Data BreachesRelated:ApolloMD Data Breach Impacts 626,000 IndividualsRelated:Under Armour Looking Into Data Breach Affecting Customers’ Email AddressesRelated:750,000 Impacted by Data Breach at Canadian Investment Watchdog

More than 100 organizationswere targeted in a recent ShinyHunters phishing campaign, with some of the latest incidents attributed to the hacking group impactingOptimizely,Figure,Panera Bread, andCrunchbase.Related:Dior, Louis Vuitton, Tiffany Fined $25 Million in South Korea After Data BreachesRelated:ApolloMD Data Breach Impacts 626,000 IndividualsRelated:Under Armour Looking Into Data Breach Affecting Customers’ Email AddressesRelated:750,000 Impacted by Data Breach at Canadian Investment Watchdog

Related:Dior, Louis Vuitton, Tiffany Fined $25 Million in South Korea After Data BreachesRelated:ApolloMD Data Breach Impacts 626,000 IndividualsRelated:Under Armour Looking Into Data Breach Affecting Customers’ Email AddressesRelated:750,000 Impacted by Data Breach at Canadian Investment Watchdog

Related:ApolloMD Data Breach Impacts 626,000 IndividualsRelated:Under Armour Looking Into Data Breach Affecting Customers’ Email AddressesRelated:750,000 Impacted by Data Breach at Canadian Investment Watchdog

Related:Under Armour Looking Into Data Breach Affecting Customers’ Email AddressesRelated:750,000 Impacted by Data Breach at Canadian Investment Watchdog

Related:750,000 Impacted by Data Breach at Canadian Investment Watchdog

Ionut Arghire is an international correspondent for SecurityWeek.

Attendees will walk away with guidance for how to build robust identity defenses, unify them under a consistent security model, and ensure business operations move quickly without compromise.

SecurityWeek’s 2026 Ransomware Summit will discuss a roadmap for defending the enterprise, from mitigating root causes to mastering recovery, giving security teams the critical insights needed to navigate and neutralize today’s ransomware extortion threats.

Source: SecurityWeek