Public breachBreachXposedOrNot· 1 Jan 2026
CarMax
Domain: carmax.com
What happened
CarMax, a US automotive retailer, had data allegedly sourced from its systems published online in January 2026, exposing 431k unique email addresses along with names, phone numbers, and physical addresses.
Breach facts
- Records exposed
- 431,646
- Sensitive
- No
- Industry
- Retail
- Data exposed
- Email addressesPhone numbersNamesPhysical addresses
This page summarises publicly reported breach metadata for awareness. For account recovery or incident response, use the official guidance from the affected service.
Breach data provided by XposedOrNot.