Edmunds data breach
The Edmunds breach happened on January 24, 2026 and exposed 177,860 accounts. 6 kinds of data were exposed.
Overview
- Site
- edmunds.com
- Breach date
- January 24, 2026
- Recorded on
- June 1, 2026
- Accounts exposed
- 177,860
- Exposed data
- Device information, Email addresses, IP addresses, Passwords, Phone numbers, Usernames
- Risk score
- 74 out of 100
Risk based on the exposed data
This breach scores 74 out of 100. The score is driven mostly by Passwords, Phone numbers, Email addresses.
The risk score is a guide to how dangerous a breach is, judged by the kinds of data exposed. The number of accounts is not included.
Breaches from the same period
- CarMax (2026-01-24, 431,371 accounts)
- Figure (2026-01-28, 967,178 accounts)
- Provecho (2026-01-30, 712,904 accounts)
What affected users should do
- Change your Edmunds password, and also change it on any other service where you used the same password. You can create a new one with the password generator.
- Turn on two-factor authentication for your login.
- Phone numbers were exposed, so watch out for impersonation by text message or phone call.
This site organizes publicly available information about data breaches. Data as of June 1, 2026. Breach dates are as originally listed; when only the month is known, the date is recorded as the 1st.