Skip to content

Search Ransomware Intelligence

Jump to a group, country, industry or search victims.

Listed on a ransomware leak site

CarMax, Inc.

carmax.com

CarMax, Inc. was listed on the ShinyHunters leak site on May 2, 2025. Brandefense has recorded 2 separate claims against it. Information as of Oct 19, 2026.

Country: United StatesIndustry: Retail
Updated continuously · figures as of Oct 19, 2026
Claimed by
ShinyHunters
First listed
May 2, 2025
Claims recorded
2

2 Leak-Site Claims.

ShinyHuntersConfirmed claim
Posted on the leak site
Sep 29, 2025
Collected by Brandefense
Apr 3, 2026
Data claimed
Not stated
Leak-site post text, written by the group
Size: 1.7 GB (compressed) | Records: 500k Records | Updated: 24 Jan 2026
ShinyHuntersConfirmed claim
Posted on the leak site
May 2, 2025
Collected by Brandefense
Oct 3, 2025
Data claimed
Not stated
Leak-site post text, written by the group
CarMax is a leading car dealership company in the United States that specializes in used cars. The company offers a unique car buying experience to its customers with its no-haggling and fair pricing model. In addition, CarMax also offers financing options and a wide range of car types, makes and models. They are renowned for their thorough inspections, warranties, and return policy.

Get alerted the moment your company or a supplier is posted on a leak site.

Alert me
Other confirmed victims claimed by the same group
VictimClaimed byCountryIndustryData claimedPosted
Vercel Inc.
vercel.com
ShinyHuntersUSUnited StatesHosting Service ProvidersNot stated
Abaco Informatica
abaco-informatica.com.ar
ShinyHuntersARArgentinaTechnologyNot stated
Correios
correos.es
ShinyHuntersESSpainTransportation and LogisticsNot stated
Ticketmaster
ticketmaster.com
ShinyHuntersUSUnited StatesMedia and EntertainmentNot stated
Somali Immigration and Nationality Agency (HSJ); Ministry of Justice and Constitutional Affairs
etas.gov.so
ShinyHuntersSOSomaliaRetailNot stated
DexCom, Inc.
dexcom.com
ShinyHuntersUSUnited StatesHealthcareNot stated
Other confirmed victims in the same industry
VictimClaimed byCountryIndustryData claimedPosted
Belcorp
belcorp.biz
QilinPEPeruRetailNot stated
Quikrete
quikrete.com
HelixUSUnited StatesRetailNot stated
Pure Options
pureoptions.com
PlayUSUnited StatesRetailNot stated
Verano Holdings
verano.com
The-seven-deadly-sinsUSUnited StatesRetail2.4 MB
Segres Systec
segres.com
QilinPEPeruRetailNot stated
buckle
buckle.com
Iah6477USUnited StatesRetail144.5 GB

Get Real-Time Alerts, IOC Feeds And Takedowns.

The Brandefense platform watches every leak site for your company, vendors and executives, and acts on what it finds.

Figures as of Oct 19, 2026. Confirmed leak-site claims collected by Brandefense technologies and validated by Brandefense analysts.

Listed on a leak site means a ransomware group has claimed the company; it is not a confirmed breach. To request a correction or removal, contact Brandefense.