Carhartt Hit by ShinyHunters Extortion Campaign, 12.9M Email Addresses Leaked Earlier this month, workwear retailer Carhartt fell victim to an extortion campaign by the cybercriminal group ShinyHunters. The attackers allegedly exfiltrated and later published data containing 12.9 million unique email addresses tied to the company. Analysis revealed that 83% of the exposed emails were already publicly available on LinkedIn or other third-party platforms, suggesting the breach may have leveraged existing data rather than a direct compromise of Carhartt’s systems. The incident highlights the risks of data aggregation by threat actors, who often combine stolen information with publicly accessible records to amplify the impact of breaches. No further details on the attack vector or additional compromised data have been disclosed. The breach underscores the growing trend of extortion-based cybercrime, where attackers pressure organizations by threatening to release stolen data unless demands are met.