DBHunter
Infinity Member
Golden Member
- Joined
- August 23, 2025
- Messages
- 2,074
- Reaction score
- 3,887
- Points
- 113
- Thread Author
- #1
https://cybernews.com/security/edmunds-d...y-hunters/
. User data, including account passwords, is supposedly impacted by the attack. Edmunds data was posted on a popular data leak forum that attackers use to exchange stolen details. According to the post’s author, the company suffered a data breach sometime in January 2026. Edmunds is a popular car-shopping platform with hundreds of thousands of users. The platform is owned by the used-vehicle retailing behemoth CarMax
Meanwhile, the Cybernews research team looked into data sample attackers attached to the data leak forum post. According to the team, the leaked data appears to be legitimate. Other leaked Edmunds data includes: Usernames, Email addresses, Passwords, Vehicle reports from 2018 to 2022. Researchers noted that some password records indicate they were encrypted using base64 hashes. Security researchers have been advising against using this hash for protecting sensitive data for years
Armed with additional information about exposed users, attackers could attempt credential stuffing on other online services. Since many users reuse passwords, exposing one set of credentials can open up far more services than users would like to admit. Finally, attackers could utilize the data for social engineering attacks, impersonating exposed users. ShinyHunters is among the most aggressive cybergangs currently operating. The cybercrime collective was previously linked to multiple high-profile breaches and large-scale data theft campaigns, including last year’s Salesforce CRM data heist
Code:
Downloads:
. User data, including account passwords, is supposedly impacted by the attack. Edmunds data was posted on a popular data leak forum that attackers use to exchange stolen details. According to the post’s author, the company suffered a data breach sometime in January 2026. Edmunds is a popular car-shopping platform with hundreds of thousands of users. The platform is owned by the used-vehicle retailing behemoth CarMax
Meanwhile, the Cybernews research team looked into data sample attackers attached to the data leak forum post. According to the team, the leaked data appears to be legitimate. Other leaked Edmunds data includes: Usernames, Email addresses, Passwords, Vehicle reports from 2018 to 2022. Researchers noted that some password records indicate they were encrypted using base64 hashes. Security researchers have been advising against using this hash for protecting sensitive data for years
Armed with additional information about exposed users, attackers could attempt credential stuffing on other online services. Since many users reuse passwords, exposing one set of credentials can open up far more services than users would like to admit. Finally, attackers could utilize the data for social engineering attacks, impersonating exposed users. ShinyHunters is among the most aggressive cybergangs currently operating. The cybercrime collective was previously linked to multiple high-profile breaches and large-scale data theft campaigns, including last year’s Salesforce CRM data heist
Code:
Code:
25|Default Billable 3P Server|2022-04-07|23517661|Hyundai|2956306314|2022: Hyundai Upfront_RET_MarApr_030122_UPFRONT_SNAP$|N9281.2990.EDMUNDS.COMINC/B26935611.322022766|NAT_NAT_VEN_MOB_DSP_HYU_RET_P2+++_NON_Edmunds_INM_NON_NON_CPC_Venue-Mobile-Native-Retention-Incentives-and-Offers_CUS_1x1_DFV_NON_N_No Button_N_MIO|216.0|Impressions|24.0|Clicks|0.0|Actions|2022-04-01|2022-04-30|1|DFP|5957358697|2758467-1_NAT_NAT_VEN_MOB_DSP_HYU_RET_P2+++_NON_Edmunds_INM_NON_NON_CPC_Venue-Mobile-Native-Retention-Incentives-and-Offers_CUS_1x1_DFV_NON_N_No Button_N_MIO
25|Default Billable 3P Server|2022-04-07|27192061|Jeep|3000638314|2022: ED_MS_22_FY_JP_NTL_SH_GM_JEEPB_ACQ_Jeep Retention Q2_040122_UPFRONT_SNAP$|N1047766.2990EDMUNDS.COMINC/B27042612.324294786|BAN_EDMUNDS_DIS_DSK_300X250_300x250_DCM_V_GRCHK_EDED001 - Endemic Edmunds Retention_RET_INMAR_L_T1_NTL_EDMUNDS_D000BU1X_NONE_JEEP GRAND CHEROKEE NEW MODEL MREC 300X250 DSK|1903.0|Impressions|0.0|Clicks|10.0|Actions|2022-04-01|2022-04-30|1|DFP|5961699971|2821285-1_BAN_EDMUNDS_DIS_DSK_300X250_300x250_DCM_V_GRCHK_EDED001 - Endemic Edmunds Retention_RET_INMAR_L_T1_NTL_EDMUNDS_D000BU1X_NONE_JEEP GRAND CHEROKEE NEW MODEL MREC 300X250 DSK_4XE
25|Default Billable 3P Server|2022-04-07|23517781|Infiniti|2995234705|2022: Infiniti FY22 Q1_T2 3PA-IRE_EAST_040122_SNAP$|N3340.Edmunds/B26964501.322720442|T2IRE_3PA_AWA_SiteVisits_East_NA_Mobile_Display_MobileApp_Edmunds_RTT_1P_IMT_QX50_NA_East-New QX50 Vehicle Overview_custom_1x1_04/01_12/31|3.0|Impressions|0.0|Clicks|0.0|Actions|2022-04-01|2022-04-30|1|DFP|5951262191|2788254-1_T2IRE_3PA_AWA_SiteVisits_East_NA_Mobile_Display_MobileApp_Edmunds_RTT_1P_IMT_QX50_NA_East-New QX50 Vehicle Overview 254x379_cus - custom_04/01_12/31
25|Default Billable 3P Server|2022-04-08|23518741|Mazda|2997722385|2022: Mazda FY157 National Upfront_Q1_RET_040122_UPFRONT_CPF$|N843334.2990EDMUNDS.COMINC/B27336166.329795849|ENG_USA_NAT_INMSHP_T1_EVG_OLA_RET_DCP_MUS_IM_EDM_MXR_1x1bbbbbb_BuildPricexx|57.0|Impressions|0.0|Clicks|0.0|Actions|2022-04-01|2022-06-30|1|DFP|5954870297|2818395-1_ENG_USA_NAT_INMSHP_T1_EVG_OLA_RET_DCP_MUS_IM_EDM_MXR_1x1bbbbbb_BuildPricexx
25|Default Billable 3P Server|2022-04-08|23521981|Volvo|2995737520|2022: Volvo T2_Q2_Miami_Upfront_040122_SNAP$|N889927.2990EDMUNDS.COMINC/B26922563.322896222|P1W1642_VL2_MWP_286_Endemic_EDMUNDS.COM INC_DK_DI_MIA_C9_AE_NA_CV_CQ_BT_IS_NA_NC1_SS_B1_02_NA_XC90 In- Seg DK _Run of Site_Contextual_P25-54_254 x 340_Click and View_NV_NA|198.0|Impressions|1.0|Clicks|0.0|Actions|2022-04-01|2022-04-30|1|DFP|5952463370|2785964-1_Apr-FBOPT-P1W1642_VL2_MWP_286_Endemic_EDMUNDS.COM INC_DK_DI_MIA_C9_AE_NA_CV_CQ_BT_IS_NA_NC1_SS_B1_02_NA_XC90 In- Seg DK_Run of Site_Contextual_P25-54_254 x 340_Click and View_NV_NA
25|Default Billable 3P Server|2022-04-07|23517781|Infiniti|2995234705|2022: Infiniti FY22 Q1_T2 3PA-IRE_EAST_040122_SNAP$|N3340.Edmunds/B26964501.322720964|T2IRE_3PA_AWA_SiteVisits_East_NA_Desktop_Display_StandardDisplay_Edmunds_RTT_1P_IMT_QX50_NA_East-New QX50 Shopping Links_custom_1x1_04/01_12/31|6.0|Impressions|1.0|Clicks|0.0|Actions|2022-04-01|2022-04-30|1|DFP|5950601455|2788256-1_T2IRE_3PA_AWA_SiteVisits_East_NA_Desktop_Display_StandardDisplay_Edmunds_RTT_1P_IMT_QX50_NA_East-New QX50 Shopping Links 320x460_cus - custom_04/01_12/31
25|Default Billable 3P Server|2022-04-08|23521981|Volvo|2992303191|2022: Volvo T2_Q2_Atlanta_Upfront_040122_SNAP$|N889927.2990EDMUNDS.COMINC/B26920577.322828320|P1W20F8_VL2_ATL_278_Endemic_EDMUNDS.COM INC_DK_DI_ATL_C4_AE_NA_CV_CQ_BT_OS_NA_NC1_SS_B1_02_NA_XC40 Out- Seg DK _Run of Site_Contextual_P25-54_254 x 340_Click and View_NV_NA|0.0|Impressions|1.0|Clicks|0.0|Actions|2022-04-01|2022-04-30|1|DFP|5943823907|2781897-1_Apr-FBOPT-P1W20F8_VL2_ATL_278_Endemic_EDMUNDS.COM INC_DK_DI_ATL_C4_AE_NA_CV_CQ_BT_OS_NA_NC1_SS_B1_02_NA_XC40 Out- Seg DK_Run of Site_Contextual_P25-54_254 x 340_Click and View_NV_NA
25|Default Billable 3P Server|2022-04-08|23521981|Volvo|2992303191|2022: Volvo T2_Q2_Atlanta_Upfront_040122_SNAP$|N889927.2990EDMUNDS.COMINC/B26920577.322805774|P1W20F7_VL2_ATL_278_Endemic_EDMUNDS.COM INC_MO_DI_ATL_C4_AE_NA_CV_CQ_BT_IS_NA_NC1_SS_B1_02_NA_XC40 In- Seg MW_Run of Site_Contextual_P25-54_254 x 340_Click and View_NV_NA|0.0|Impressions|1.0|Clicks|0.0|Actions|2022-04-01|2022-04-30|1|DFP|5943824129|2781891-1_Apr-FBOPT-P1W20F7_VL2_ATL_278_Endemic_EDMUNDS.COM INC_MO_DI_ATL_C4_AE_NA_CV_CQ_BT_IS_NA_NC1_SS_B1_02_NA_XC40 In- Seg MW_Run of Site_Contextual_P25-54_254 x 340_Click and View_NV_NA
25|Default Billable 3P Server|2022-04-08|23516341|Chevrolet|2995675081|2022: GM_Chevy Division_National Retention_Models N-Z_Q2_040122_UPFRONT_SNAP$|N8334.2990.EDMUNDS.COMINC1/B26894948.322515251|Edmunds.com»Suburban»D»CON»Chevrolet Suburban-Mobile New Model Native Retention Shopping Tools»NA+320 x 460»IN»MOB»SS»PM»CPA»NAT»BIN»SPP»IMW»NA»N/A»ENG»M»P1VQR4K|53.0|Impressions|1.0|Clicks|0.0|Actions|2022-04-01|2022-04-30|1|DFP|5952332777|2772782-1_Edmunds.com»Suburban»D»CON»Chevrolet Suburban-Mobile New Model Native Retention Shopping Tools»NA+320 x 460»IN»MOB»SS»PM»CPA»NAT»BIN»SPP»IMW»NA»N/A»ENG»M»P1VQR4K
25|Default Billable 3P Server|2022-04-07|23521981|Volvo|2953487913|2022: Volvo Used_CPO_UPFRONT_010122_SNAP$|N889927.2990EDMUNDS.COMINC/B26953046.323588797|P1W2ZSZ_VL1_CPO_434_Endemic_EDMUNDS.COM INC_MO_DI_NAT_C6_AE_RO_CV_RT_BT_IM_CPO_CP1_SS_BD_02_NA_XC60 RET 300x250 MO_Run of Site_Behavioral_P25-54_300 x 250_Click and View_NV_NA|7980.0|Impressions|10.0|Clicks|0.0|Actions|2022-04-01|2022-04-30|1|DFP|5859420151|2762186-1_Apr-BT-OPT-P1W2ZSX_VL1_CPO_434_Endemic_EDMUNDS.COM INC_PK_DI_NAT_C6_AE_RO_CV_RT_BT_IM_CPO_CP1_SS_BD_02_NA_XC60 Retention Package_Run of Site_Behavioral_P25-54_Click and View_NV_NA
25|Default Billable 3P Server|2022-04-08|23521981|Volvo|2952755665|2022: Volvo T1 XC60 RET_UPFRONT_010122_SNAP$|N889927.2990EDMUNDS.COMINC/B26922443.322856391|P1W0V95_VL1_NAT_424_Endemic_EDMUNDS.COM INC_DK_DI_NAT_C6_AE_NA_CV_RT_BT_IM_LSU_NC1_SS_B1_02_NA_Shopping Tools 1x1_Run of Site_Behavioral_P25-54_746 x 254_Click and View_NV_NA|273.0|Impressions|7.0|Clicks|0.0|Actions|2022-04-01|2022-04-30|1|DFP|5858123667|2759310-1_Apr-P1W0V95_VL1_NAT_424_Endemic_EDMUNDS.COM INC_DK_DI_NAT_C6_AE_NA_CV_RT_BT_IM_LSU_NC1_SS_B1_02_NA_Shopping Tools 1x1_Run of Site_Behavioral_P25-54_746 x 254_Click and View_NV_NA
25|Default Billable 3P Server|2022-04-08|23521981|Volvo|2992495378|2022: Volvo T2_Q2_Boston_Upfront_040122_SNAP$|N889927.2990EDMUNDS.COMINC/B26937109.323081344|P1W2PYL_VL2_BPN_262_Endemic_EDMUNDS.COM INC_DK_DI_BOS_C4_AE_NA_CV_CQ_BT_OS_NA_NC1_SS_B1_02_NA_XC40 Out- Seg DK _Run of Site_Contextual_P25-54_254 x 340_Click and View_NV_NA|1452.0|Impressions|3.0|Clicks|0.0|Actions|2022-04-01|2022-04-30|1|DFP|5944883719|2782358-1_Apr-FBOPT-P1W2PYL_VL2_BPN_262_Endemic_EDMUNDS.COM INC_DK_DI_BOS_C4_AE_NA_CV_CQ_BT_OS_NA_NC1_SS_B1_02_NA_XC40 Out- Seg DK_Run of Site_Contextual_P25-54_254 x 340_Click and View_NV_NA
25|Default Billable 3P Server|2022-04-07|23517661|Hyundai|2956306314|2022: Hyundai Upfront_RET_MarApr_030122_UPFRONT_SNAP$|N9281.2990.EDMUNDS.COMINC/B26935611.322193041|NAT_NAT_TUC_DSK_DSP_HYU_RET_P2+++_NON_Edmunds_INM_NON_NON_CPC_Tucson-Wired-Native-Retention-Pricing-Card_CUS_1x1_DFV_NON_N_No Button_N_NVO|232.0|Impressions|5.0|Clicks|0.0|Actions|2022-04-01|2022-04-30|1|DFP|5955875271|2758472-1_NAT_NAT_TUC_DSK_DSP_HYU_RET_P2+++_NON_Edmunds_INM_NON_NON_CPC_Tucson-Wired-Native-Retention-Pricing-Card_CUS_1x1_DFV_NON_N_No Button_N_NVO
25|Default Billable 3P Server|2022-04-08|23521741|Toyota|2949749233|2022: Toyota Tier II Denver Region NV Upfront_010422_UPFRONT_CPF$|N2724.edmunds/B26841023.321386599|Edmunds.com_DEN_NV_TU_Mobile_STD IAB_RET_New Toyota Tundra Shoppers_PM_1 x 1|4.0|Impressions|0.0|Clicks|0.0|Actions|2022-01-04|2023-01-03|1|DFP|5855424161|2755592-1_Edmunds.com_DEN_NV_TU_Mobile_STD IAB_RET_New Toyota Tundra Shoppers_PM_1 x 1
25|Default Billable 3P Server|2022-04-08|23517781|Infiniti|2995234705|2022: Infiniti FY22 Q1_T2 3PA-IRE_EAST_040122_SNAP$|N3340.Edmunds/B26964501.322720436|T2IRE_3PA_AWA_SiteVisits_East_NA_Mobile_Display_MobileApp_Edmunds_RTT_1P_IMT_QX60_NA_East-New QX60 Vehicle Overview_custom_1x1_04/01_12/31|8.0|Impressions|0.0|Clicks|0.0|Actions|2022-04-01|2022-04-30|1|DFP|5951262629|2788262-1_T2IRE_3PA_AWA_SiteVisits_East_NA_Mobile_Display_MobileApp_Edmunds_RTT_1P_IMT_QX60_NA_East-New QX60 Vehicle Overview 254x379_cus - custom_04/01_12/31
25|Default Billable 3P Server|2022-04-08|23516341|Chevrolet|2995675081|2022: GM_Chevy Division_National Retention_Models N-Z_Q2_040122_UPFRONT_SNAP$|N8334.2990.EDMUNDS.COMINC1/B26894948.322528470|Edmunds.com»Silverado 1500»D»CON»Chevrolet Silverado 1500-Mobile New Model Native Retention Incentives and Offers»NA+359 x 367»IN»MOB»SS»PM»CPA»NAT»BIN»SPP»IMW»NA»N/A»ENG»M»P1VQR3T|9111.0|Impressions|134.0|Clicks|0.0|Actions|2022-04-01|2022-04-30|1|DFP|5971123343|2821943-1_Edmunds.com»Silverado 1500»D»CON»Chevrolet Silverado 1500-Mobile New Model Native Retention Incentives and Offers»NA+359 x 367»IN»MOB»SS»PM»CPA»NAT»BIN»SPP»IMW»NA»N/A»ENG»M»P1VQR3T_OPT_Used Silverado 1500Downloads:
