Carhartt data breach exposes information of 12.9 million accounts

[XploitLK-Bot]

The ShinyHunters extortion group has released a trove of stolen data allegedly belonging to clothing retailer Carhartt, impacting roughly 12.9 million user accounts. The leak, which surfaced earlier this month, was flagged by data breach notification service Have I Been Pwned, confirming the scale of the compromise.

The exposed dataset reportedly includes sensitive personal information tied to Carhartt’s online customer base. While the exact contents have not been fully itemized, such breaches typically involve names, email addresses, and hashed passwords. Carhartt has yet to issue a formal public statement detailing the full scope of the incident, but affected users are strongly advised to treat their account credentials as compromised.

If you have used a Carhartt account in the past, consider the following steps:

• Change your Carhartt password immediately if you have not already done so.
• Use a unique password for each online service; do not reuse credentials across platforms.
• Enable multi-factor authentication (MFA) where available to add an extra layer of security.
• Monitor your email for phishing attempts, as cybercriminals often leverage leaked contact details for targeted scams.
• Check Have I Been Pwned directly to confirm whether your email address appears in the breach.

The ShinyHunters group has a history of selling or publishing large datasets from major companies, and this incident underscores the persistent risk of credential stuffing and identity theft following such disclosures.

Source: BleepingComputer

Has your organization or personal account been impacted by this breach, and what steps are you taking to secure accounts that may share the same credentials?