ShinyHunters claims it drove off with 1.7M CarGurus records

ShinyHunters announced and posted alleged data breaches on its leak site, claiming the theft of records from multiple organizations (including CarGurus — 1.7M corporate records claimed — Mercer, Beacon Pointe, Figure, Canada Goose, Betterment, Match Group, Panera Bread, CarMax, and Edmunds). The group is accused of using voice‑phishing to capture single‑sign‑on codes for Okta, Microsoft Entra, and Google accounts to access systems and exfiltrate data; victims report varying impacts and responses, including forensic investigations and offers of credit monitoring.