If you’ve ever searched for a car on CarGurus, your personal information could now be circulating online. A hacking group known as ShinyHunters has published what it claims are 12.4 million records taken from CarGurus, a popular auto shopping platform used by millions of people each month.

The leaked data includes names, phone numbers, email addresses, physical addresses and even finance pre-qualification details. While most of the records were already exposed in past incidents, about 3.7 million are newly added to the pile. That means fresh data is now freely available for criminals to download.

Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide – free when you join my CYBERGUY.COM newsletter.

149 MILLION PASSWORDS EXPOSED IN MASSIVE CREDENTIAL LEAK

What you need to know about the CarGurus breach

The group behind the leak, ShinyHunters, published a 6.1GB file on Feb. 21, claiming it came from CarGurus. The file allegedly contains 12.4 million user records tied to the U.S.-based auto research and shopping platform CarGurus.

CarGurus operates in the U.S., Canada and the U.K., and its website attracts an estimated 40 million monthly visitors. It allows you to compare vehicles, contact sellers, and, in some cases, apply for financing.

According to Have I Been Pwned, which later added the dataset to its breach database, the exposed information includes email addresses, IP addresses, full names, phone numbers, physical addresses, account IDs, dealer details, subscription information and finance pre-qualification application data, along with outcomes.

Have I Been Pwned reports that about 70% of the data had already appeared in previous breaches. Roughly 3.7 million records are new. CarGurus has not released an official statement confirming the incident and did not respond to media requests for comment. ShinyHunters is known for leaking company data when ransom negotiations fail. The group has recently claimed attacks on major brands across telecom, retail, finance, and tech.

How it works and why it matters to you

ShinyHunters typically gains access by tricking employees, not by smashing through firewalls. In past cases, the group used phone calls or fake login pages to convince staff to hand over credentials. Once inside, attackers can quietly access cloud systems that store customer data.

In some campaigns, they also convinced employees to install malicious apps that granted access to customer databases. That means attackers could read stored information without triggering obvious alarms. If this dataset is legitimate, criminals now have detailed personal profiles tied to car shopping and financing activity, which is valuable.

Finance pre-qualification data is especially sensitive. Even if it does not include full Social Security numbers, it signals that you were actively sharing financial details. That makes you a prime target for follow-up scams, identity theft attempts and fake loan offers. Because the data is publicly available for download, it does not take much skill for criminals to start using it.

“We recently experienced a cybersecurity incident,” a CarGurus spokesperson told CyberGuy. “We promptly responded by securing the affected environment, and we are currently working with a leading cybersecurity firm to investigate. Based on the investigation to date, we believe the activity has been contained and limited in scope. Also, at this time, there are no indications that dealer data feeds, APIs, or core systems or products used by our consumers or dealer partners have been compromised. We remain fully operational, and our services continue without interruption. We will notify any affected individuals in accordance with applicable laws.”

DATA BREACH EXPOSES 400,000 BANK CUSTOMERS’ INFO

7 ways you can protect yourself from the CarGurus breach

Here’s what you can do right now to reduce your risk and stay ahead of potential scams tied to this leak.

1) Check if your email and passwords are compromised

To see if your email was affected, visit Have I Been Pwned at haveibeenpwned.com. Enter your email address to find out if your information appears in the CarGurus leak. When done, come back here for Step 2.

2) Change your passwords immediately

Start with your most important accounts, such as email, medical and banking. Use strong, unique passwords with letters, numbers and symbols. Avoid predictable choices like names or birthdays. Never reuse passwords. One stolen password can unlock multiple accounts.  A password manager makes this simple. It stores complex passwords securely and helps you create new ones. Many managers also scan for breaches to see if your current passwords have been exposed. Use a password manager to generate strong, unique passwords for every account and store them securely. That way, if one account is exposed, criminals can’t use the same password to access the rest of your accounts. Check out the best expert-reviewed password managers of 2026 at Cyberguy.com.

3) Reduce your online exposure with a data removal service

You can also consider a personal data removal service. While no service can guarantee the complete removal of your data from the internet, a data removal service is really a smart choice. They aren’t cheap, and neither is your privacy. These services do all the work for you by actively monitoring and systematically erasing your personal information from hundreds of websites. It’s what gives me peace of mind and has proven to be the most effective way to erase your personal data from the internet. By limiting the information available, you reduce the risk of scammers cross-referencing data from breaches with information they might find on the dark web, making it harder for them to target you.

Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com.

Get a free scan to find out if your personal information is already out on the web: Cyberguy.com.

4) Turn on two-factor authentication

If CarGurus or your email provider offers two-factor authentication (2FA), enable it. This adds a second step, like a code sent to your phone, making it much harder for someone to access your account even if they have your password.

5) Watch for finance-related phishing scams

Be extra cautious with emails or texts about car loans, financing approvals, or dealership follow-ups. Do not click links in unsolicited messages. Instead, contact the company directly using the official contact details you find on their website. Also, use strong antivirus software to block malicious links and downloads that often follow phishing campaigns. If attackers use this leaked data to target you with infected attachments, antivirus protection adds another layer of defense.

Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android and iOS devices at Cyberguy.com.

6) Monitor your credit reports

If you applied for financing, check your credit reports for unfamiliar inquiries or new accounts. Early detection can help you stop identity theft before it spirals. Consider placing a credit freeze if you see suspicious activity.

7) Consider identity theft protection

Identity theft protection services can monitor for unusual activity tied to your name, Social Security number, or financial accounts. They can alert you quickly if someone tries to open a new credit card in your name.

See my tips and best picks on Best Identity Theft Protection at Cyberguy.com.

Kurt’s key takeaway

This incident highlights a bigger issue than just one company. When platforms collect detailed financial and personal data, they become high-value targets. If the leaked dataset is authentic, millions of people who were simply shopping for a car now face increased risk of scams. CarGurus has not publicly confirmed a breach. Customers deserve clarity when sensitive financial application data may be involved. Silence only increases uncertainty.

Should companies that collect financing data be required to publicly confirm or deny breaches within a set timeframe?  Let us know by writing to us at Cyberguy.com.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Sign up for my FREE CyberGuy Report 
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide – free when you join my CYBERGUY.COM newsletter.

Copyright 2026 CyberGuy.com. All rights reserved. 

Due to snowfall on Sunday, 10,280 feet high Jalori Pass in Kullu district was closed. Traffic on Highway-305 came to a standstill due to snowfall that started after rain in the afternoon. Due to this, three HRTC buses and one private bus got stuck. At the same time, 69 panchayats were cut off from the district headquarters. Ten centimeters of snowfall was recorded here. Snow fell in Narkanda in Shimla, while hailstorm occurred in Kufri.

There was rain and hailstorm in many panchayats of Rajgarh area of ​​Sirmaur district on Sunday afternoon. Apart from the pea crop, the peach crop was also damaged due to this. 7 cm of snow fell in the religious place Shikari Devi and 5 cm of snow fell in Shaitadhar. There was snowfall on the high peaks of Kinnaur including Nako. It rained till late evening in Reckong Peo, Kalpa and Sangla. Snowfall also occurred in other higher areas of Shimla including Narkanda, Hatu Peak, Kotkhai, Shrikoti, while rain continued in the lower areas including Rampur in the afternoon.

Snowfall occurred on Kailash, Kugti, Chaubia, Daruni, Kali Chhau and other high peaks of Manimahesh area of ​​Chamba district. Snowfall also occurred in many higher reaches of Kullu and Lahaul-Spiti, while rain turned the weather cool in the lower reaches of Kullu-Manali. Slippery increased due to snowfall on Manali-Leh road from Dhundi to Atal Tunnel. As a precautionary measure, the police stopped ordinary vehicles at Solanganala and only four-by-four vehicles were allowed to move further.

Light rain occurred in Hamirpur and Una districts on Sunday. There was snowfall on Dhauladhar hills and light rain with strong wind in lower areas. However, farmers and gardeners were disappointed due to lack of adequate rain in the plains, as wheat and fruit plants need good rain at this time.

1,000 small and big tourist vehicles stranded
Atal Tunnel has received about 15 cm snowfall till Sunday night. A white sheet of snow has spread from the South Portal of Atal Tunnel to Solanganala. Due to accumulation of snow on the road, about 1,000 small and big tourist vehicles are stuck from the South Portal of Atal Tunnel to Dhundhi. Thousands of tourists remained stranded due to this. Manali Police has launched a rescue operation to free the vehicles. This campaign continued till late evening.

An illegal immigrant released during the Biden administration has been charged with multiple counts of assault and battery after allegedly groping female classmates in the hallways of a Virginia high school, according to parents and school officials.

“I think this entire horrifying situation is the direct consequence of policy with really dysfunctional priorities, and that’s to shield adult illegal immigrants at the expense of children’s safety, even in their public schools,” Stephanie Lundquist-Arora, the mother of 3 students in the Fairfax County School System, told Fox News.

Lundquist-Arora joined “Fox & Friends Weekend” to discuss the arrest of an 18-year-old student accused of touching several female classmates inappropriately while they were walking through the halls of Fairfax High School.

ILLEGAL IMMIGRANT ACCUSED OF ASSAULTING NJ TEEN COULD BE RELEASED UNDER SANCTUARY POLICIES, ICE WARNS

The student, identified as 18-year-old Israel Flores Ortiz, was arrested and charged with nine counts of assault and battery after allegedly touching female students while they were walking through the hallways between classes, according to a letter sent to parents by Fairfax High School officials.

Lundquist-Arora claims officials at the high school waited two weeks to inform parents and the move only came after parental pressure.

HIGH SCHOOL SENIOR CHARGED WITH ‘RANDOM’ MURDER AFTER 68-YEAR-OLD WOMAN FOUND DEAD IN MASSACHUSETTS HOME

Fox News reached out to both Fairfax High School and the school district (FCPS) and did not receive a comment.

Neither entity immediately returned Fox News Digital’s requests for comment.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

FCPS provided local outlet 7News with the following statement, however:

“While Fairfax County Public Schools is unable to comment on specifics due to federal and state privacy laws, we prioritize student and staff safety. We fully investigate. Anytime someone shares. That an incident has occurred at school or that they do not feel safe at school.”

Recently, this topic was discussed in the Secretariat under the chairmanship of Chief Minister Rekha Gupta and senior officials of various departments including Health Minister Dr. Pankaj Kumar Singh. In this, proposals to create a strong and modern health system by integrating the major government medical institutions of Delhi were discussed in detail. In this, the Chief Minister suggested that scientific and effective use of available resources is necessary to improve health services. For this, integration of different institutions will enable better utilization of doctors, specialists, equipment and infrastructure.

The pressure of beds and patients in hospitals will reduce
The status of beds available in hospitals and the increasing pressure of patients were also discussed in the meeting. Officials said that the pressure of patients in some hospitals is very high, while the capacity of some hospitals is not being fully utilized. Rajiv Gandhi Super Specialty Hospital has a total capacity of 650 beds, but currently only about 250 beds are in use and about 400 beds are vacant. On the other hand, the number of patients in GTB Hospital is quite high. More than 1500 beds are being used here against the original capacity of about 1400 beds. According to the data of patients, every year more than 14 lakh patients come to the OPD of GTB Hospital and about 95 thousand patients take IPD services. At the same time, about 1.27 lakh OPD patients come to Delhi State Cancer Institute and about 2.87 lakh OPD patients are registered in Rajiv Gandhi Hospital. It is clear from these figures that the pressure of patients on GTB hospital is high, while the capacity of other hospitals is not being fully utilised.

Everyone will get super specialty services
The Chief Minister said that after the integration of the three hospitals, there will be systematic delivery of various super specialty services. According to the proposal, services like cardiology, pulmonology, gastroenterology, gastro surgery, nephrology, urology, rheumatology and clinical hematology will be strengthened in Rajiv Gandhi Super Specialty Hospital. Delhi State Cancer Institute will be made a premier center for cancer treatment, where services like radiation oncology, surgical oncology, nuclear medicine, palliative care and radio imaging will be integrated. At the same time, departments like Orthopedics, Internal Medicine, ENT, General Surgery, Neurosurgery, Endocrinology and Ophthalmology will be further strengthened in Guru Teg Bahadur Hospital.

There will be better use of expensive medical equipment
It was decided in the meeting that modern medical equipment is available in many hospitals, but due to lack of expert staff and scattered resources, they are not being fully utilized. For example, Rajiv Gandhi Hospital has advanced bronchoscopy facility, Delhi State Cancer Institute has Linear Accelerator for Radiotherapy, Rajiv Gandhi Hospital has Cath Lab and Echo Lab, while GTB Hospital has facilities like Bone Bank. The government says that under the integrated system, coordinated and better use of all these expensive equipment will be ensured, which will enable patients to get more effective treatment.

NIMHANS-2 will be equipped with modern facilities
The Delhi government is planning to develop the Institute of Human Behavior and Allied Sciences (IHBAS) on the lines of the prestigious National Institute of Mental Health and Neuro Sciences (NIMHANS), Bangalore. Under this scheme, Ihbas will provide about 75 acres of its vacant land to Guru Teg Bahadur Hospital, so that a huge integrated medical institute can be developed here. Ihbass owns a total of 111.69 acres of land, of which a large portion is currently vacant and is considered suitable for future expansion. At present the hospital building of the institute is spread over an area of ​​about 19.9 acres. According to the government plan, modern health infrastructure will be built in place of old and dilapidated buildings. Under this project, new hostels, state-of-the-art labs, pathology and biochemistry facilities, auditoriums and lecture theaters will be built.

The energy secretary has told Sky News that the government will “fight people’s corner” as the war in Iran threatens a fresh energy price crisis.

But, speaking to Sunday Morning with Trevor Phillips, Ed Miliband refused to be drawn on what support the government may provide.

Politics latest: Iran war threatens to raise UK energy bills

Mr Miliband said: “We’re going to fight people’s corner… when it comes to the effects on them. That’s why this week, we’ve been saying to the petrol retailers, the heating oil companies, we’re not going to tolerate price gouging. We’re not going to tolerate unfair practices.

“Some people don’t like that. But that’s tough.”

He added: “I’m not going to speculate on how help will be provided if we do, if we make further interventions”.

Sky News understands the government will announce a support package as early as Monday for the poorest households that use heating oil.

Beyond help for oil customers, Chancellor Rachel Reeves is holding off on anything else for now.

While many homes in the UK are heated by gas, big swathes of rural areas are off-grid and rely on heating oil and liquefied petroleum gas to warm their properties.

In England, around 1.1 million fossil-fuel-heated homes are not connected to the gas grid.

While in Northern Ireland, two-thirds of homes rely on heating oil.

The energy price cap regulates gas and electricity prices and won’t increase until July at the earliest – and is actually set to fall by an average of £117 from the start of April – but doesn’t cover heating oil.

The Middle East conflict has seen the price of oil rise to over $100 a barrel, up from around $70 a barrel in February.

Iran has essentially closed off the Strait of Hormuz shipping lane in the Gulf by threatening to attack oil tankers, cutting off oil supply.

Around 20% of global oil exports usually pass through the waterway.

Fuel market ‘hasn’t been working well’

The former Labour leader also rejected the assertion that the government hasn’t “insulted” fuel retailers.

On Friday, Mr Miliband and Ms Reeves, met with fuel retailers and warned them not to profiteer from motorists.

But some of the government’s rhetoric has angered petrol retailers, who briefly threatened to pull out of the meeting and accused ministers of “inflammatory language”.

Mr Miliband told Sir Trevor: “This is a market that hasn’t been working well.

“It’s what they call rockets and feathers, that when the wholesale price goes up, prices jump up. And then when wholesale prices come down, they come down very, very slowly.”

He added the UK has “got to learn the lesson of this crisis”, which is: “If we are exposed to these fossil fuel markets at a time of the greatest geopolitical instability we’ve seen in generations, then it’s the British people who end up paying the price.”

He pointed to government’s actions to increase renewable and nuclear energy generation.

Asked about increased North Sea oil and gas exploration, he added that the government will continue to exploit existing licences, but that new licences would not reduce bills.

Oprah Winfrey is clapping back at online haters who trolled the longtime talk show host for walking like she was “90 years old” during an appearance at Paris Fashion Week earlier this month. 

“On the internet, somebody was, you know how people drag you on the internet. So they were dragging me and Gayle [King] saying, ‘Look at them walking like they’re 90 years old,'” Oprah said, per a video clip on Instagram posted on Friday. 

“And so there was a moment where we’re walking into the Chloe fashion show and my [assistant] had just handed me the Chloe sunglasses before I got out of the car,” she added, clarifying that those glasses were not prescription glasses. 

OPRAH WINFREY STUNS AT PARIS FASHION WEEK WITH DRAMATIC NEW LOOK AFTER WEIGHT LOSS

“I didn’t know where I was walking, I could not see,” she explained while chuckling. “So everybody who’s saying ‘you’re walking like you’re 90,’ I could not see! I told security, ‘I can’t see. I can’t see. Tell me, tell me where I’m walking. I can’t see.'”

OPRAH ACCEPTED BEING SUBJECT OF JOKES ABOUT HER WEIGHT DUE TO SELF-BLAME, SAYS ‘I FELT THEY WERE RIGHT’

“And Gayle’s like, ‘I got two broken toes. I can’t walk,'” she mentioned. “And that’s the reason we looked like we were 90 years old is because I couldn’t see and Gayle’s got two broken toes!”

Fans were quick to join in on the laugh. 

“She is ABSOLUTELY AMAZING and funny,” one user commented on the clip.

DR MARC SIEGEL: AMERICA, BEWARE OF FALSE WEIGHT LOSS GODS

“Watching the video after Oprah’s explanation makes it funnier. She couldn’t see!” another quipped. 

Earlier this month, Winfrey stunned when she arrived at Paris Fashion Week with her new slimmed-down figure.

CLICK HERE TO SIGN UP FOR THE ENTERTAINMENT NEWSLETTER

The 72-year-old media personality was spotted arriving at the Chloe runway show looking noticeably thinner in a pair of high-waisted jeans, a cream-colored top and a brown jacket.

She paired the look with the Chloe sunglasses, a white purse and closed-toed pointy high-heeled shoes, and wore her hair in a high ponytail.

LIKE WHAT YOU’RE READING? CLICK HERE FOR MORE ENTERTAINMENT NEWS

After trying many different diets, joining Weight Watchers and trying a holistic approach, Winfrey shared in 2023 that she began taking GLP-1 weight loss medication, telling People in December 2025, she made the decision when she realized her lifelong struggle with her weight was due to obesity, a word she “avoided” before.

“If you have obesity in your gene pool, I want people to know it’s not your fault,” Winfrey said. “I want people to stop blaming yourself for genes and an environment you can’t control. I want people to have the information, whatever you choose to do with it, whether you get the medications, or whether you want to keep dieting.”

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Winfrey shared that after she began taking the GLP-1 medication, she began feeling like “everything is just calmer and stronger” since she has help controlling “the messages that are being sent to your brain about overeating.”

Fox News Digital’s Lori Bashian contributed to this post. 

Two people have died during an outbreak of meningitis in the Canterbury area of Kent.

In a statement, the UK Health Security Agency (UKHSA) said 11 other people had fallen ill and that antibiotics are being arranged for some students in the area.

This breaking news story is being updated and more details will be published shortly.

Please refresh the page for the fullest version.

You can receive breaking news alerts on a smartphone or tablet via the Sky News app. You can also follow us on WhatsApp and subscribe to our YouTube channel to keep up with the latest news.