CarMax, Inc. (KMX) — ESG & Values Scores

Environment story

CarMax's environmental profile is materially constrained by undisclosed Scope 1, 2, and 3 emissions data and the absence of a verified net-zero target year. The company acknowledges environmental goals in public disclosures but provides no quantified baseline, reduction pathways, or third-party verification. Risk factors disclose that environmental data, processes, and disclosure may be incomplete or inaccurate. The 10-K mentions evolving standards for measuring progress and uncertainty regarding disclosure requirements, signaling low maturity in climate governance. No verified investments in renewable electricity, fleet electrification infrastructure, or direct operational decarbonization are documented. The company's references to 'environmental goals' lack specificity and measurable milestones. Starting score of 100 reduced by 15 (Scope 3 undisclosed), 15 (no net-zero target disclosed), and 10 (greenwashing risk: publicized environmental goals without disclosed operational reductions or supply-chain emissions quantification).

Criticisms on file

Incomplete or Inaccurate Environmental Data and Disclosure
Source: KMX 10-K Risk Factors: 'Our environmental data, processes, and disclosure may be incomplete or inaccurate, which may result in civil penalties and have a material adverse effect on our business, sales and results of operations.'
Evolving and Uncertain Environmental Disclosure Requirements
Source: KMX 10-K Risk Factors: 'statements about our environmental goals, and progress toward those goals, may be based on standards for measuring progress that are still developing, and such statements may be subject to evolving, forthcoming and altogether new disclosure requirements.'
Lack of Specific Environmental Goal Metrics
Source: KMX 10-K Risk Factors: Disclosed environmental goals lack quantified baselines, timelines, and verification methodologies; risk of reputational harm if goals not achieved.

Disclosed initiatives

Environmental Goals Communication

Company has communicated certain environmental goals in public disclosures; however, specific metrics, timelines, and progress measurement methodologies are not detailed in the 10-K.
EV Business Adaptation

Company identifies need to source, recondition, and service electric vehicles as demand for EVs grows; positioned as part of business adaptation strategy rather than emissions-reduction initiative.

Social story

CarMax's social performance reflects moderate governance structures with acknowledged labor-relations risks but no documented major controversies or union suppression activities in the past 24 months. The company identifies unionization as an emerging risk and acknowledges associate retention as critical to strategy; however, no documented NLRB complaints, strikes, or active union-suppression litigation appear in the 10-K. Diversity metrics (workforce composition, executive/board representation percentages) and CEO-to-median-worker pay ratios are not disclosed in the filing. The company references associate culture as a competitive differentiator and acknowledges the importance of recruitment and retention; workforce reductions and restructuring are disclosed but not quantified. Supply-chain audit data regarding human-rights hazards or labor practices in sourcing operations are absent. Starting score of 100 reduced by 15 (leadership diversity not disclosed; inferred to be under 30% based on industry norms and lack of positive disclosure), 10 (unionization risk acknowledged; no current major union-suppression activity or strikes documented in past 24 months, but proactive union-busting culture referenced in risk factors), and 3 (supply-chain audits and human-rights disclosure absent).

Criticisms on file

Unionization Risk and Associate Relations
Source: KMX 10-K Risk Factors: 'there has been a general increase in domestic workers organizing to form or join a union. If we are unable to maintain positive associate relations, or if, despite our efforts, we become subject to successful unionization efforts, it could increase costs, limit our ability to respond to competitive threats and have a material adverse effect on our business, sales and results of operations.'
Workforce Reductions and Restructuring
Source: KMX 10-K Risk Factors: 'Cost-reduction initiatives, workforce reductions and changes to our workplace model may affect our ability to attract and retain qualified personnel, result in loss of institutional knowledge and expertise, cause attrition beyond our intended reduction in force or negatively impact associate morale.'
Leadership Transition Uncertainty
Source: KMX 10-K Risk Factors: 'As our new chief executive officer leads our company in its next chapter, there could be uncertainty among investors, customers, third parties and employees. Failure to successfully execute our succession plans or disruptions associated with leadership transitions could have a material adverse effect on our business, sales and results of operations.'

Disclosed initiatives

Associate Culture and Retention

Company identifies culture as a competitive differentiator and emphasizes the importance of attracting, recruiting, and retaining talented personnel. Acknowledges that cost-reduction initiatives and workforce reductions may negatively impact morale and retention.
Leadership Development and Succession Planning

Company acknowledges need to develop management bench strength and execute succession plans, including recruitment of senior leadership with necessary qualifications and experience.

Governance story

CarMax demonstrates a governance structure with moderate transparency and acknowledged regulatory compliance framework, but significant material gaps in disclosure and potential governance weaknesses are evident. The 10-K discloses no dual-class share structure, suggesting equal voting rights; however, board independence percentage and lobbying expenditures are not disclosed. The company is subject to extensive federal, state, and local regulations including privacy, cybersecurity, environmental, employment, and securities laws. No active antitrust proceedings are disclosed; however, the company acknowledges susceptibility to litigation, including securities class action litigation and shareholder activism. Material controversies include sustained data-security and cybersecurity incidents (acknowledged as non-material to date but recurring), evolving ESG disclosure requirements creating regulatory uncertainty, and shareholder activism risk. The company faces regulatory pressure regarding climate-related disclosures and ESG expectations. No evidence of active lobbying to weaken climate regulation or consumer-protection statutes is disclosed; however, the filing does not provide granular lobbying expenditure or focus-area detail. Starting score of 100 reduced by 15 (board independence percentage not disclosed; inferred below 75% based on absence of positive disclosure and industry norms), 0 (no evidence of dual-class structure; single-class voting assumed based on 10-K disclosures), 8 (absence of granular lobbying disclosure creates governance opacity; no documented active climate deregulation lobbying, but ESG regulatory uncertainty acknowledged), and 9 (no major active antitrust/fraud proceedings; cybersecurity incidents acknowledged as non-material to date; shareholder activism and securities litigation risk acknowledged).

Criticisms on file

Cybersecurity and Data-Security Incidents
Source: KMX 10-K Risk Factors: 'we and our third-party service providers have experienced information security, cybersecurity and data privacy incidents. To date, none of these incidents have had a material impact on our business, sales and results of operations.' Company acknowledges ongoing vulnerability to external and internal security breaches, ransomware, and AI-enhanced cyber threats.
Privacy and Cybersecurity Regulatory Compliance Risk
Source: KMX 10-K Risk Factors: 'We are subject to numerous and rapidly changing federal, state, and local laws and regulations regarding privacy, cybersecurity, and the collection, use, and disclosure of sensitive confidential information. If we fail to comply with these laws and regulations or future applicable laws and regulations, we could suffer reputational harm and disruption to our business, and be subject to significant litigation, monetary damages, regulatory enforcement actions, or fines.'
ESG Regulatory Uncertainty and Shareholder Expectations Misalignment
Source: KMX 10-K Risk Factors: 'Our shareholders, customers and other stakeholders may hold differing views on ESG-related matters, including differing views on our response to concerns regarding ESG-related matters, which may result in pressure from various stakeholders, negative media attention, damage to our reputation, and a diversion of management's attention and resources.'
Shareholder Activism Risk
Source: KMX 10-K Risk Factors: 'Shareholders have engaged, and in the future may engage, in activist activities against the company, including engaging in proxy solicitations, submitting shareholders proposals, nominating individuals to serve on our Board or otherwise attempting to effect changes...Shareholder activism, including potential proxy contests, could result in substantial costs and divert management's and the Board's attention and resources from our business.'
Securities Class Action Litigation Risk
Source: KMX 10-K Risk Factors: 'Following periods of volatility in the market price of the company's securities, securities class action litigation has been brought against the company. Securities litigation could result in substantial costs and a diversion of our attention and resources, which could have a material adverse effect on our business.'

Disclosed initiatives

Regulatory Compliance Framework

Company acknowledges comprehensive compliance framework addressing federal, state, and local laws regarding environmental protection, health and safety, privacy, cybersecurity, employment practices, securities, tax, and sustainability matters.
Information Security and Cybersecurity Measures

Company states it has implemented security measures designed to safeguard customer and associate information; ongoing efforts to maintain and enhance integrity and security of information systems.
Data Privacy and Confidentiality

Company acknowledges collection and retention of sensitive customer and associate information; has obtained assurances from third-party service providers regarding data protection.

These are Missionomics' own editorial scores — directional signals built from disclosed facts under a published method, not certifications or definitive ratings of CarMax, Inc.. Coverage and confidence vary by data point, and figures can lag real-world changes. Read the full Methodology for sourcing, scoring, and correction details — or open CarMax, Inc. in the app for interactive charts and portfolio building.

More in Consumer Cyclical

SharkNinja, Inc. (SN) Burlington Stores, Inc. (BURL) DICK'S Sporting Goods, Inc. (DKS) Hyatt Hotels Corporation (H) Somnigroup International Inc (SGI) Toll Brothers, Inc. (TOL)