CARGURUS DATA BREACH AFFECTS 12.5 MILLION ACCOUNTS

Summary from the TLDR InfoSec newsletter

Automotive marketplace CarGurus has confirmed a security incident in which 12.5 million user accounts were exposed, including names, email addresses, phone numbers, physical addresses, financial prequalification data, and some dealer information. The researchers attributed the hack to the ShinyHunters group, known for high‑impact social engineering attacks against major enterprises and universities.