Carhartt: a data breach
In August 2026, clothing retailer Carhartt was the target of a ShinyHunters "pay or leak" extortion campaign . The group subsequently published data allegedly obtained from the company including 12.9M unique email addresses, names, phone numbers and physical addresses. The published corpus also contained millions of synthetic records that did not relate to real individuals and were excluded from the breach.
The record
- Organisation
- Carhartt →
- Identity
- Carharttidentified by its domain in a verified breach record
- Records affected
- 12,933,413 records
- Data exposed
- Email addresses, Names, Phone numbers, Physical addresses
- Sector
- Not recorded
- Occurred
- 2026-08-13
- Disclosed
- 2026-08-25
- First recorded here
- 2026-09-09
Fastnexa security experts
Worried the same could happen to your company?
If you are a customer or supplier of Carhartt, or work in the same industry, a Fastnexa security expert can tell you what this means for your data and test whether the same attack would work on you.
Think you’ve already been hit? Don’t wait on a form: call or WhatsApp +1 (732) 454 2616. We reply within 1 hour, 24/7. Emergency help →
Sources (1)
One source so far.
- Have I Been Pwned ↗First reported
2026-08-25