Carhartt Breach Exposes Data From 12.9 Million Accounts
Clothing giant Carhartt has confirmed a significant data breach after the ShinyHunters extortion group published records tied to nearly 13 million customer accounts. The stolen dataset was verified and added to Have I Been Pwned, the breach notification service used to alert affected users.
Details on exactly what data was exposed and how attackers initially gained access haven't been fully disclosed, but the scale of the leak puts Carhartt among the larger retail breaches this year. ShinyHunters has been linked to a string of high-profile corporate data thefts, typically pairing breaches with extortion demands before dumping data publicly when companies don't pay.
Affected customers should watch for phishing attempts referencing their Carhartt purchases and change reused passwords, especially if the same credentials appear on other accounts.