CarGurus

Profile narrative

CarGurus operates as an online automotive marketplace that connects consumers with vehicle sellers. The platform provides searchable listings of new and used cars, along with pricing analysis and dealer ratings. It serves buyers looking for vehicles and dealers seeking to advertise inventory. Services include tools for dealers such as inventory management, advertising packages, and performance analytics. The marketplace is available in the United States, Canada, and the United Kingdom.

The company is headquartered in the United States, specifically in Cambridge, Massachusetts. CarGurus became a publicly traded corporation, listed on the NASDAQ under the ticker CARG. A cybersecurity incident reported on February 21, 2026, exposed approximately 12.4 million user records, indicating the scale of its user base. Of those records, about 3.7 million were newly exposed, while the remainder had appeared in earlier breaches. The breach involved names, phone numbers, email addresses, physical addresses, and finance pre‑qualification details. CarGurus stated it secured the affected environment, engaged a leading cybersecurity firm, and found the activity contained with no evidence of compromise to dealer data feeds, APIs, or core systems. The incident highlights the company’s reliance on large volumes of consumer data for its marketplace operations. CarGurus distinguishes itself through transparent pricing algorithms and aggregated dealer ratings that aim to improve trust in vehicle transactions. These attributes position it as a data‑driven intermediary in the automotive sector.

Incidents

1 incident linked to this organisation.