Carhartt Data Breach Exposes 12.9 Million Accounts

• •ShinyHunters claims to have stolen data from nearly 13 million Carhartt accounts.
• •Troy Hunt's analysis revealed only 12.9 million genuine accounts were affected.
• •The leaked data included sensitive customer and employee information, alongside synthetic records.

The ShinyHunters hacking group claims to have compromised Carhartt, stealing sensitive data from nearly 13 million accounts. The breach, which occurred on August 13, 2026, involved over 50GB of data, including customer and employee information. Troy Hunt, founder of Have I Been Pwned, analyzed the leaked data and found that while ShinyHunters claimed 24.8 million email addresses were exposed, the actual number of affected individuals was around 12.9 million. The data included unique email addresses, names, phone numbers, and physical addresses, but also contained millions of synthetic records that were not real individuals. Carhartt has not confirmed the breach or issued a public statement. The group attempted to extort Carhartt for $3.3 million but was rebuffed. Hunt's analysis revealed anomalies in the data, indicating that much of it was fabricated. The breach highlights the importance of verifying claims made by cybercriminals.