ShinyHunters Leak 12.4 Million CarGurus Records in Massive Data Dump

A 6.1GB dataset allegedly stolen from CarGurus and published by the ShinyHunters extortion group exposes approximately 12.4 million user records — including physical addresses, phone numbers, and financing data — raising significant risk of targeted phishing, fraud, and extortion; the report also highlights common mitigations such as least-privilege access, DLP, encryption, and third-party risk management.