.png)
Edmunds Data Breach Lawsuit Investigation
Shamis & Gentile P.A., one of the nation's premier class action law firms specializing in data breach cases, is investigating the Edmunds.com, Inc. data breach.
If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation.
About Edmunds.com, Inc.
Edmunds.com provides car shoppers and dealers with expert reviews, pricing data, vehicle listings and a variety of digital tools to help with buying, selling and researching cars. The company is headquartered in Santa Monica, California, and also has an office in Detroit.
In 2021, Edmunds was acquired by CarMax, one of the largest used-vehicle retailers in the country.
What Happened?
On or about Aug. 19, 2025, Edmunds learned of unauthorized activity involving a vendor that operates systems supporting its proprietary messaging application. This tool is used by car dealers and potential customers to exchange messages, and in this incident, a number of messages were potentially accessed by an unauthorized party.
Information Potentially Exposed:
- Names
- Social Security numbers
- Credit card information
- Driver’s license information
Your Rights and Next Steps
If you received a notice from Edmunds about this data breach, it is important to take the situation seriously. Even if there is no evidence of misuse so far, the exposure of sensitive information like Social Security numbers, credit card details and driver’s license numbers can put individuals at risk for identity theft and fraud.
Here are steps you can take right now:
- Review your credit reports and financial statements for any suspicious activity.
- Sign up for the free 24-month credit monitoring and identity protection services offered by Edmunds through IDX. The deadline to enroll is Jan. 31, 2026.
- Consider placing a fraud alert or security freeze on your credit file to help prevent new accounts from being opened in your name.
- Report any suspected identity theft to law enforcement and the Federal Trade Commission.
- Keep records of all correspondence and actions you take regarding this incident.
Lawyers are ready to help those affected by the Edmunds data breach understand their rights and options. If your information was compromised, you may be entitled to compensation for any harm or inconvenience you have experienced.
You May Be Entitled to Compensation
If you were notified that your information was exposed in the Edmunds data breach, you may qualify to join a class action lawsuit seeking compensation for damages, lost time or expenses related to the breach. Lawyers are actively investigating this incident and are prepared to assist individuals affected.
To find out if you are eligible and to take the next step in protecting your rights, complete the below form to join the lawsuit investigation.
.svg)