All Breaches
January 24, 2026 Verified Automotive

CarMax Data Breach

The CarMax data breach was confirmed on January 24, 2026, due to a dataset associated with the customer communication records of the US-based automotive retailer being released following a failed…

431.4 Thousand
Reported Records
4
Data Types
High
Severity
Yes
Verification

Exposed Data Types

4
Email addresses
Names
Phone numbers
Physical addresses

Additional Information

Added DateFebruary 20, 2026
Breach DateJanuary 24, 2026
Domaincarmax.com
SourceAutomotive retail customer contact data breach
Last Content UpdateJuly 19, 2026

Verification and editorial method

LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.

Report missing or incorrect information

Company Information

Company NameCarMax
SectorAutomotive
CountryUnited States
Websitecarmax.com

Risk Level

High

The reported impact exceeds 100 thousand and falls within the high severity band.

Protect Yourself

Check whether you were affected by this breach

Check Now