CarGurus purportedly breached by ShinyHunters

Online vehicle research and shopping website CarGurus had 1.7 million corporate files allegedly stolen by the ShinyHunters hacking operation, which threatened to expose pilfered records should no negotiations materialize by Feb. 20, according to The Register.

Infiltration of CarGurus' systems on Feb. 13 through single sign-on codes obtained via voice phishing enabled the theft of files with personally identifiable information and other internal company records, claimed ShinyHunters. The hacking group previously admitted to compromising Betterment and Panera Bread via their respective SSO codes.

Such assertions come days after ShinyHunters purported breaching investment advisory firms Mercer Advisors and Beacon Pointe Advisors, from which it was able to nab 5 million and 100,000 records, respectively. Meanwhile, Canada Goose, a luxury performance outerwear and clothing manufacturer that was also recently claimed to have been breached by ShinyHunters, emphasized that the data exposed by the group was from an old data security incident.