ShinyHunters Leaks Sensitive Data from 12.9 Million Carhartt Accounts in June 2024 Breach

The ShinyHunters extortion group published sensitive data from approximately 12.9 million accounts stolen from clothing retailer Carhartt earlier in June 2024. The breach was confirmed by data breach notification service Have I Been Pwned, which reported the exposure of compromised account information. No specific technical details, such as exact data types or attack vectors, were disclosed in the notice. The incident involves unauthorized access and subsequent leak of user data by the threat actor. The breach impacts Carhartt’s customer accounts, though the full scope of exposed information remains unspecified.