Edmunds, the automotive research and car-shopping platform, had data on approximately 178,000 accounts exposed after the ShinyHunters hacking group claimed a breach in January 2026.
What happened
According to Have I Been Pwned, the ShinyHunters hacking group listed Edmunds as a breach victim in January 2026. The stolen data was later published publicly. Cybernews reported on the incident, which involved the automotive research and car-shopping platform.
What was exposed
According to HIBP, the exposed data included email addresses, usernames, passwords, IP addresses, phone numbers, device information, and vehicle-related records.
Who is affected
Approximately 178,000 unique accounts are reported to have been affected, according to HIBP. These are likely users who registered on the Edmunds platform.
What to do now
If you have an Edmunds account, change your password immediately. Because passwords were included in the breach, also update any other accounts where you reused the same password. Enable two-factor authentication where available. Be alert to phishing attempts using your email address or phone number.