ShinyHunters leaks data from 12.9 million Carhartt accounts after ransom refusal
ShinyHunters, an extortion group, published roughly 50GB of stolen Carhartt data on the dark web after the apparel maker declined to pay a $3.3 million ransom demand. Have I Been Pwned founder Troy Hunt confirmed the leak stems from a breach of Carhartt's Databricks analytics platform, exposing 12.9 million accounts containing names, emails, phone numbers, and addresses, alongside employee and corporate records.
GoKawiil's interpretation of the reporting above, not reported fact.
The breach highlights growing risks tied to third-party cloud analytics platforms, which can become single points of failure exposing both customer and internal corporate data. Carhartt's refusal to pay ransom, followed by public data dumping, reflects a broader trend of extortion groups escalating pressure tactics when companies resist payment.
- ShinyHunters leaked 50GB of Carhartt data after a failed $3.3 million extortion attempt.
- The breach traces back to Carhartt's Databricks analytics platform, not a direct network intrusion.
- Over 12.9 million accounts' worth of personal and corporate data, including PII, were exposed.
Yubico YubiKey 5 NFC Security Key — When breaches like this dump millions of account records, a stolen password alone shouldn't be enough to get into your accounts. The YubiKey 5 NFC adds a physical second factor you tap or plug in, working with major sites and password managers across USB-A and NFC-capable phones. It's a small keychain-sized way to make credential leaks far less useful to attackers.
See Yubico YubiKey 5 NFC Security Key on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: bleepingcomputer.com, 2026-08-27
Published there as: “Carhartt data breach exposes information of 12.9 million accounts”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.