SHINYHUNTERS ALLEGEDLY DROVE OFF WITH 1.7M CARGURUS RECORDS

Summary from the TLDR InfoSec newsletter

Cybercrime gang ShinyHunters has claimed the theft of 1.7 million CarGurus corporate records, including personal and internal data, and is extorting the company with a February 20 deadline. The crew has chalked up 15 alleged breaches in 2026, hitting financial firms, retail brands, car marketplaces, and dating platforms, often via social engineering and SSO abuse.