Connect with us

Technology

CarGurus breach linked to ShinyHunters exposes 12.4M records

Published

on

CarGurus breach linked to ShinyHunters exposes 12.4M records

NEWYou can now listen to Fox News articles!

If you’ve ever searched for a car on CarGurus, your personal information could now be circulating online. A hacking group known as ShinyHunters has published what it claims are 12.4 million records taken from CarGurus, a popular auto shopping platform used by millions of people each month.

The leaked data includes names, phone numbers, email addresses, physical addresses and even finance pre-qualification details. While most of the records were already exposed in past incidents, about 3.7 million are newly added to the pile. That means fresh data is now freely available for criminals to download.

Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide – free when you join my CYBERGUY.COM newsletter.

149 MILLION PASSWORDS EXPOSED IN MASSIVE CREDENTIAL LEAK

Advertisement

A hacker group known as ShinyHunters claims it leaked 12.4 million records linked to the car shopping platform CarGurus. (Wei Leng Tay/Bloomberg via Getty Images)

What you need to know about the CarGurus breach

The group behind the leak, ShinyHunters, published a 6.1GB file on Feb. 21, claiming it came from CarGurus. The file allegedly contains 12.4 million user records tied to the U.S.-based auto research and shopping platform CarGurus.

CarGurus operates in the U.S., Canada and the U.K., and its website attracts an estimated 40 million monthly visitors. It allows you to compare vehicles, contact sellers, and, in some cases, apply for financing.

According to Have I Been Pwned, which later added the dataset to its breach database, the exposed information includes email addresses, IP addresses, full names, phone numbers, physical addresses, account IDs, dealer details, subscription information and finance pre-qualification application data, along with outcomes.

Have I Been Pwned reports that about 70% of the data had already appeared in previous breaches. Roughly 3.7 million records are new. CarGurus has not released an official statement confirming the incident and did not respond to media requests for comment. ShinyHunters is known for leaking company data when ransom negotiations fail. The group has recently claimed attacks on major brands across telecom, retail, finance, and tech.

Advertisement

How it works and why it matters to you

ShinyHunters typically gains access by tricking employees, not by smashing through firewalls. In past cases, the group used phone calls or fake login pages to convince staff to hand over credentials. Once inside, attackers can quietly access cloud systems that store customer data.

In some campaigns, they also convinced employees to install malicious apps that granted access to customer databases. That means attackers could read stored information without triggering obvious alarms. If this dataset is legitimate, criminals now have detailed personal profiles tied to car shopping and financing activity, which is valuable.

Finance pre-qualification data is especially sensitive. Even if it does not include full Social Security numbers, it signals that you were actively sharing financial details. That makes you a prime target for follow-up scams, identity theft attempts and fake loan offers. Because the data is publicly available for download, it does not take much skill for criminals to start using it.

“We recently experienced a cybersecurity incident,” a CarGurus spokesperson told CyberGuy. “We promptly responded by securing the affected environment, and we are currently working with a leading cybersecurity firm to investigate. Based on the investigation to date, we believe the activity has been contained and limited in scope. Also, at this time, there are no indications that dealer data feeds, APIs, or core systems or products used by our consumers or dealer partners have been compromised. We remain fully operational, and our services continue without interruption. We will notify any affected individuals in accordance with applicable laws.”

DATA BREACH EXPOSES 400,000 BANK CUSTOMERS’ INFO

Advertisement

7 ways you can protect yourself from the CarGurus breach

Here’s what you can do right now to reduce your risk and stay ahead of potential scams tied to this leak.

1) Check if your email and passwords are compromised

To see if your email was affected, visit Have I Been Pwned at haveibeenpwned.com. Enter your email address to find out if your information appears in the CarGurus leak. When done, come back here for Step 2.

The exposed dataset reportedly includes names, emails, phone numbers, addresses and finance pre-qualification details. (Felix Zahn/Photothek via Getty Images)

2) Change your passwords immediately

Start with your most important accounts, such as email, medical and banking. Use strong, unique passwords with letters, numbers and symbols. Avoid predictable choices like names or birthdays. Never reuse passwords. One stolen password can unlock multiple accounts.  A password manager makes this simple. It stores complex passwords securely and helps you create new ones. Many managers also scan for breaches to see if your current passwords have been exposed. Use a password manager to generate strong, unique passwords for every account and store them securely. That way, if one account is exposed, criminals can’t use the same password to access the rest of your accounts. Check out the best expert-reviewed password managers of 2026 at Cyberguy.com.

3) Reduce your online exposure with a data removal service

You can also consider a personal data removal service. While no service can guarantee the complete removal of your data from the internet, a data removal service is really a smart choice. They aren’t cheap, and neither is your privacy. These services do all the work for you by actively monitoring and systematically erasing your personal information from hundreds of websites. It’s what gives me peace of mind and has proven to be the most effective way to erase your personal data from the internet. By limiting the information available, you reduce the risk of scammers cross-referencing data from breaches with information they might find on the dark web, making it harder for them to target you.

Advertisement

Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com.

Get a free scan to find out if your personal information is already out on the web: Cyberguy.com.

4) Turn on two-factor authentication

If CarGurus or your email provider offers two-factor authentication (2FA), enable it. This adds a second step, like a code sent to your phone, making it much harder for someone to access your account even if they have your password.

5) Watch for finance-related phishing scams

Be extra cautious with emails or texts about car loans, financing approvals, or dealership follow-ups. Do not click links in unsolicited messages. Instead, contact the company directly using the official contact details you find on their website. Also, use strong antivirus software to block malicious links and downloads that often follow phishing campaigns. If attackers use this leaked data to target you with infected attachments, antivirus protection adds another layer of defense.

Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android and iOS devices at Cyberguy.com.

Advertisement

6) Monitor your credit reports

If you applied for financing, check your credit reports for unfamiliar inquiries or new accounts. Early detection can help you stop identity theft before it spirals. Consider placing a credit freeze if you see suspicious activity.

7) Consider identity theft protection

Identity theft protection services can monitor for unusual activity tied to your name, Social Security number, or financial accounts. They can alert you quickly if someone tries to open a new credit card in your name.

See my tips and best picks on Best Identity Theft Protection at Cyberguy.com.

Security experts warn the leaked information could be used for phishing scams, fake loan offers and identity theft. (iStock)

Kurt’s key takeaway

This incident highlights a bigger issue than just one company. When platforms collect detailed financial and personal data, they become high-value targets. If the leaked dataset is authentic, millions of people who were simply shopping for a car now face increased risk of scams. CarGurus has not publicly confirmed a breach. Customers deserve clarity when sensitive financial application data may be involved. Silence only increases uncertainty.

Advertisement

Should companies that collect financing data be required to publicly confirm or deny breaches within a set timeframe?  Let us know by writing to us at Cyberguy.com.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Sign up for my FREE CyberGuy Report 
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide – free when you join my CYBERGUY.COM newsletter.

Copyright 2026 CyberGuy.com. All rights reserved. 

Advertisement
Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Technology

Aether OS is a computer in a browser built for the AT Protocol

Published

on

Aether OS is a computer in a browser built for the AT Protocol

Aether OS puts a full-fledged desktop in your browser that ties directly into the AT Protocol. That means it connects to your Bluesky account and other public records. It offers a pretty full suite of apps, 42 in total, covering text editing, task management, and social media. There’s even a rudimentary tracker for making chiptunes, a DAW, and a video editor.

Of course, part of the appeal is also the cyberpunk good looks that draw obvious inspiration from The Matrix.

Right now, the project is in alpha, and there are a lot of rough edges. Documentation is also basically non-existent. So, if you get stuck trying to use an app, you’re kind of SOL. Oh, and nothing is encrypted or permissioned, so be careful what you store — it’s all publicly visible.

Continue Reading

Technology

Sotomayor’s Wabi Sabi is the funnest record of 2026

Published

on

Sotomayor’s Wabi Sabi is the funnest record of 2026

Shout out to subscriber N_Gorski for today’s pick. They popped into the comments on last week’s recommendation to ask what I thought of the new Sotomayor record. Well, I hadn’t actually heard it yet, but now I’m obsessed.

The group consists of siblings Raul and Paulina Sotomayor from Mexico City. Wabi Sabi is their first record since 2020’s Origenes, and it is pure joy. You can look back through everything I’ve recommended over the last several months, and “fun” is not how you’d describe most of it. But that’s what Wabi Sabi is — it’s fun, chaotic, and dancey as hell.

I was only familiar with Sotomayor before this because of a short documentary about Raul’s various projects made by Ableton. In that video, he discusses how his approach to making music has changed over the years. How he used to try to make things sound “proper” and “clean,” but now it’s about “how much can we distort it” or “how much can we stretch it.”

You can certainly hear that in the music. The first track, “Me dejo llevar,” opens with a synth arpeggio that has clearly been timestretched to within an inch of its life. It’s loaded with digital artifacts. The whole track has a light crust, as if everything is clipping just ever so slightly. “Who’s there” similarly bristles as the edges, sounding like a dance floor constantly on the verge of erupting into a riot.

The vintage electronic drum hits, droning bass, and reverb-drenched noise stabs never reach full catharsis, but simmer beautifully into album highlight “Vida.” Here, Paulina finds a sultry gear as she croons over a UK garage-inflected track that eventually erupts into an afrohouse club banger.

Advertisement

Wabi Sabi ricochets between genres with infectious abandon. Afrobeat, cumbia, electro pop, R&B, and more all collide in what is easily the most fun album of 2026 so far. What makes it all the more impressive is that, for all its unconventional sounds (a donkey jaw?) and stylistic excursions, Sotomayor still has a distinct vision that holds the record together.

At no point does the chaos threaten to overwhelm. Never does it feel like the duo are simply throwing things at the wall to see what sticks; everything is a carefully made decision in service of the party. The gently meandering guitar of “Yo se todo de ti,” the classic house of “Todo se derrumba,” and the dancehall of “Prende la palma” all feel unified by Paulina’s undeniable charisma on the mic and Raul’s uninhibited sonic curiosity.

Continue Reading

Technology

Smart glasses detector app warns if you’re being recorded

Published

on

Smart glasses detector app warns if you’re being recorded

NEWYou can now listen to Fox News articles!

Smart glasses are built to blend in. Most of the time, they look just like a normal pair of glasses. The difference is that some models can quietly take photos or record video without anyone nearby realizing it.

As these wearable cameras start showing up in everyday places, more people are wondering when they might be on camera. That concern helped inspire a new Android app called Nearby Glasses, which lets you check whether smart glasses may be nearby.

The idea behind the app is simple. If a nearby device is broadcasting a Bluetooth signal linked to smart glasses, the app tries to detect it. For people worried about hidden cameras in public spaces, even a small warning could help them stay more aware of their surroundings.

META SMART GLASSES PRIVACY CONCERNS GROW

Advertisement

Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide – free when you join my CYBERGUY.COM newsletter.

Mark Zuckerberg sported a pair of Meta Ray-Ban Display AI glasses while speaking at the Meta Connect event in Menlo Park, California, on Sept. 17, 2025. (David Paul Morris/Bloomberg via Getty Images)

Why smart glasses are raising privacy concerns

Smart glasses are designed to blend in. Unlike a phone or camera, they often look identical to regular eyewear. That means someone could be filming without anyone around them realizing it.

Modern versions of these devices can capture photos, record video and even livestream. Some models also connect to AI tools that can analyze what the wearer sees. Privacy advocates say the biggest problem is visibility. When someone pulls out a phone to record, people usually notice.

With smart glasses, the camera may be hidden in plain sight. As a result, conversations about consent and privacy are becoming more urgent as wearable cameras spread.

Advertisement

How the nearby glasses app works

Nearby Glasses works by scanning for Bluetooth signals that devices broadcast to connect with phones and other hardware. Each manufacturer uses unique Bluetooth identifiers. The app listens for those signals and compares them to known identifiers from companies that produce wearable devices. If the app detects one of those signals, it alerts the user.

Here is how the process works:

  • The app scans nearby Bluetooth devices in real time
  • It checks each signal against known manufacturer identifiers
  • If a match appears, the user receives an alert

The app currently focuses on devices made by companies such as Meta and Snap. Users can also add additional Bluetooth identifiers to expand what the app detects. That allows the tool to flag more types of wearable tech. To keep scanning continuously, users must enable a foreground service in the app and press Start Scanning. A debug log then displays the scanning activity while the app runs.

Why the developer created the app

The app was developed by software creator Yves Jeanrenaud, who says he built it after seeing how wearable cameras were being used. On the project page, Jeanrenaud described smart glasses as a major privacy concern. He believes the devices could open the door to more recording without consent.

He also pointed to reports about smart glasses appearing in sensitive situations. Those examples include cases where wearable cameras were allegedly used during immigration enforcement or in situations where people were filmed without permission.

According to Jeanrenaud, the app represents what he calls a form of technological resistance. In other words, using technology to push back against technology. Still, even he admits it may only address part of the problem.

Advertisement

As smart glasses become more common in public places, tools like the Nearby Glasses app aim to help people stay aware of possible hidden recording devices. (Kurt “CyberGuy” Knutsson)

The app is helpful but not perfect

Like any detection tool, Nearby Glasses has limitations. Bluetooth signals do not always reveal exactly what device is nearby. For example, a device made by the same manufacturer could trigger an alert. That means a headset or other gadget might appear as a possible pair of smart glasses.

False positives are possible. However, those alerts still give users more awareness of nearby devices that could be capturing data. Right now, the app is available only for Android. The developer has said an iPhone version could happen in the future, depending on time and demand.

Ways to stay safe around smart glasses

Smart glasses are becoming more common. While tools like Nearby Glasses can help, awareness is still the best defense. Here are several ways to protect your privacy.

Pay attention to visible camera indicators

Some smart glasses include small LED lights that turn on while recording. If you notice a light on someone’s frames, they may be filming.

Advertisement

Speak up if you feel uncomfortable

If you suspect someone is recording you in a private setting, you can ask them directly. Many people stop when confronted.

Avoid sensitive conversations in crowded areas

Wearable cameras thrive in public environments where people are distracted. Avoid discussing personal information in places where recording could occur.

Disable Bluetooth visibility on your own devices

Limiting the signals your devices broadcast can reduce how easily others track or scan your hardware.

WORLD’S THINNEST AI GLASSES FEATURE BUILT-IN AI ASSISTANT

Stay informed about wearable tech

Smart glasses are evolving quickly. Learning how they work helps you recognize when someone might be using one nearby.

Advertisement

Mark Zuckerberg wears the Meta Ray-Ban Display glasses while speaking at the company’s headquarters in Menlo Park, California, on Sept. 17, 2025. (Reuters/Carlos Barria)

Take my quiz: How safe is your online security?

Think your devices and data are truly protected? Take this quick quiz to see where your digital habits stand. From passwords to Wi-Fi settings, you’ll get a personalized breakdown of what you’re doing right and what needs improvement. Take my Quiz here: Cyberguy.com.

Kurt’s key takeaways

Smart glasses represent a strange moment in the evolution of technology. On one hand, they promise convenience. People can capture moments hands-free or access digital information instantly. On the other hand, they blur the line between everyday life and constant surveillance. Apps like Nearby Glasses show that some people are already pushing back. They want tools that reveal when hidden cameras might be nearby. However, technology alone will not settle the debate. The real question is how society decides to balance innovation with basic expectations of privacy.

And that leads to a bigger question. If cameras can hide in ordinary glasses, should people be required to reveal when they are recording you? Let us know by writing to us at Cyberguy.com.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Advertisement

Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide – free when you join my CYBERGUY.COM newsletter.

Copyright 2026 CyberGuy.com.  All rights reserved.

Advertisement
Continue Reading
Advertisement

Trending