ShinyHunters release 12.4 million CarGurus user records after a failed ransom attempt, exposing emails, finance data, and account details in a growing February spree.