CarMax, Inc.
ent_019dee61b9d0973cf65760eea548b573
Disclosures
2
Leak Site · 1 jurisdiction
Multi-filing incidents
—
no multi-filing incident in sample
Max affected reported
—
no filed count in sample
Leak-site claims
2
unverified actor claims
Identity resolution
- Canonical name
- CarMax, Inc.
- Normalized
- carmax— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- 529900F60CID3NCZM330
- SEC EDGAR CIK
- 0001170010
- Domain
- carmax.com
Unverified threat-actor claim — not a regulatory filing
Attribution, victim identity, and counts shown here derive from a threat actor's public extortion-blog claims, aggregated by ransomware.live. They have not been validated by the victim or any regulator. Treat them as the threat actor's assertion until a regulatory filing or victim disclosure corroborates them.
Disclosure history (2)newest first
- GLOBALLeak Siteas victim2025-09-29
Size: 1.7 GB (compressed) | Records: 500k Records | Updated: 24 Jan 2026
- GLOBALLeak Siteas victim2025-05-02
CarMax is a leading car dealership company in the United States that specializes in used cars. The company offers a unique car buying experience to its customers with its no-haggling and fair pricing model. In addition, CarMax also offers financing options and a wide range of car types, makes and models. They are renowned for their thorough inspections, warranties, and return policy.
Subsidiary disclosures (4)filed by group companies
◈ These filings were made by or about subsidiaries of CarMax, Inc. — not by CarMax, Inc. itself. Corporate relationships are mapped from GLEIF relationship records and SEC Exhibit 21 filings.
- Massachusetts State AGvia CARMAX AUTO SUPERSTORES, INC.2025-02-17
CarMax Auto Superstores, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-02-17. 2 Massachusetts residents were affected.
- Indiana State AGvia CARMAX AUTO SUPERSTORES, INC.2020-08-18
CarMax Auto Superstores, Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2020-08-01 and was reported on 2020-08-18. 1 Indiana residents were affected.
- Indiana State AGvia CARMAX AUTO SUPERSTORES, INC.2020-08-05
CarMax Auto Superstores, Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2020-07-27 and was reported on 2020-08-05. 2 Indiana residents were affected.
- Massachusetts State AGvia CARMAX AUTO SUPERSTORES, INC.2019-02-26
CarMax Auto Superstores Inc reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2019-02-26. 3 Massachusetts residents were affected. The report records the breach type as paper.