Here's your step-by-step playbook — what the letter means, what data was exposed, and exactly what to do to protect yourself and seek compensation.
See Your Action Steps ↓CarMax Auto Superstores, Inc. was legally required to send you this notice. Under MA law, companies that experience a data breach must notify affected individuals in writing.
Under the Massachusetts Data Security Law (201 CMR 17.00), CarMax Auto Superstores, Inc. was legally required to notify you of this breach. The letter should specify which of your data was involved — commonly Name, Email Address, Mailing Address. Even if you received this letter some time ago, you may still have legal remedies available — consult an attorney promptly.
Used in combination with other data for identity theft.
This information was part of the compromised data.
This information was part of the compromised data.
This information was part of the compromised data.
This information was part of the compromised data.
This information was part of the compromised data.
This information was part of the compromised data.
What They're Offering
What They're Not Telling You
Companies are required to notify you — but they are not required to tell you about your legal options.
Complete these steps in order. Step 1 costs nothing.
Read the letter carefully
Note the date of the breach, the exact data types listed, and the offer (if any) of credit monitoring services. Keep the original letter — it may be evidence.
Monitor your accounts closely
Set up transaction alerts on all financial accounts. Review recent statements for charges you do not recognize.
Check for unauthorized financial activity
Review 90 days of account statements for unfamiliar transactions. If you find any, dispute them immediately in writing with your bank and file an FTC report.
Consult a data breach attorney
You may be entitled to compensation beyond what the company's offer covers. An attorney can evaluate your specific situation at no charge — the consultation is free and there is no fee unless compensation is recovered.
Receiving this letter is not the end — it may be the beginning of a legal claim. Affected individuals have recovered compensation for:
Class action lawsuits allow groups of affected individuals to pursue claims collectively, increasing leverage and reducing the burden on any one person. There is no cost to you to have an attorney review your case — fees are only collected if there is a recovery.
No obligation. No upfront cost. Tell us what happened and we'll let you know if you have a claim.
CarMax Auto Superstores, Inc. breach?
Free case review · No fee unless you win