CarMax, Inc.
ent_019dee61b9d0973cf65760eea548b573
Disclosures
3
SEC 10-K Item 1C · Leak Site · 2 jurisdictions
Incidents
—
no linked incident in sample
Max affected reported
—
no filed count in sample
Leak-site claims
2
unverified actor claims
Identity resolution
- Canonical name
- CarMax, Inc.
- Normalized
- carmax— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- 529900F60CID3NCZM330
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- carmax.com
Disclosure history (3)newest first
- FEDERALSEC 10-K Item 1Cas victim2026-04-15
CarMax 10-K Item 1C cybersecurity disclosure. The filing describes the company's cybersecurity program, governance (CITO/CISO reporting, Board Technology and Innovation Committee oversight), third-party vendor risk processes, tabletop exercises, and penetration testing. The company explicitly states it has not experienced any material cybersecurity incidents or incurred any material expenses resulting from a cybersecurity breach. No specific incident is disclosed.
- GLOBALLeak Siteas victim2025-09-29
Size: 1.7 GB (compressed) | Records: 500k Records | Updated: 24 Jan 2026
- GLOBALLeak Siteas victim2025-05-02
CarMax is a leading car dealership company in the United States that specializes in used cars. The company offers a unique car buying experience to its customers with its no-haggling and fair pricing model. In addition, CarMax also offers financing options and a wide range of car types, makes and models. They are renowned for their thorough inspections, warranties, and return policy.