Carhartt Hit by ShinyHunters Extortion Campaign, 12.9M Email Addresses Leaked Earlier this month, workwear retailer Carhartt fell victim to an extortion campaign by the cybercriminal group ShinyHunters. The attackers allegedly exfiltrated and later published data containing 12.9 million unique email addresses tied to the company. Analysis revealed that 83% of the exposed emails were already publicly available on LinkedIn or other third-party platforms, suggesting the breach may have leveraged existing data rather than a direct compromise of Carhartt’s systems. The incident highlights the risks of data aggregation by threat actors, who often combine stolen information with publicly accessible records to amplify the impact of breaches. No further details on the attack vector or additional compromised data have been disclosed. The breach underscores the growing trend of extortion-based cybercrime, where attackers pressure organizations by threatening to release stolen data unless demands are met.

Carhartt Data Breach Exposes 12.9 Million Customer Accounts A recent data breach at American apparel company Carhartt has compromised the personal information of 12.9 million customers. According to reports from data breach notification site Have I Been Pwned and the alleged threat actors, ShinyHunters, over 50 gigabytes of sensitive data were stolen. The exposed information includes names, email addresses, phone numbers, and physical addresses. The breach was first disclosed by ShinyHunters, a notorious cybercriminal group known for large-scale data theft. While the group claims responsibility, Carhartt has yet to officially confirm the incident. The breach highlights ongoing risks in data security, particularly as threat actors continue to target high-profile organizations. Details remain limited, but the incident underscores the growing threat of unauthorized data exfiltration and the need for robust cybersecurity measures. No further confirmation or remediation steps from Carhartt have been announced at this time.