Carhartt data breach exposes information of 12.9 million accounts
The ShinyHunters extortion group has published data stolen from roughly 12.9 million Carhartt accounts, according to Have I Been Pwned, which tracks and indexes compromised credentials. The breach was reported earlier this month.
Why this matters: Nearly 13 million people bought work clothes and ended up in a criminal's database instead. ShinyHunters does not just steal data — they publish it, which means whatever was taken is now out in the open and cannot be un-leaked. If you have a Carhartt account, assume your information is circulating. Change the password, especially if you reused it anywhere else. Retailers collect a lot more than shipping addresses, and most people have no idea what they handed over just to buy a jacket.
Who should care: Cybersecurity · Privacy officers · Administrators
This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.