Skip to content

Carhartt

Disclosed Aug 25, 20264 weeks ago12,933,413 accountsUnverified

ShinyHunters leaks 12.9 million Carhartt accounts from Databricks breach

ShinyHunters published about 50 GB it said was stolen from Carhartt's Databricks analytics platform after the company declined to negotiate, and Have I Been Pwned counted 12.9 million accounts. Carhartt did not issue a statement.

What is known

People affected12,933,413 (accounts in the leaked data, per Have I Been Pwned)
DisclosedAug 25, 2026
HappenedAug 13, 2026
AttackExtortion
Data exposedEmails, Names, Phone numbers, Addresses, Employment
SectorRetail · US
StatusUnverified: not yet confirmed by an official notice, a filing or the organization
Check your emailHave I Been Pwned

Sources

Source
Have I Been Pwned: Carhartthaveibeenpwned.com · Aggregator
Carhartt data breach exposes information of 12.9 million accountsbleepingcomputer.com · News

Notices filed

WhereFiledPeople
Have I Been Pwnedaccounts in the dataAug 2512,933,413
ResearchtotalAug 27
History of this record
  • 2026-09-25 · source_type: aggregator to press · seed source
  • 2026-09-25 · source_url: https://haveibeenpwned.com/Breach/Carhartt to https://www.bleepingcomputer.com/news/security/carhartt-data-breach-exposes-information-of-129-million-accounts/ · seed source
  • 2026-09-25 · country: empty to US · seed source
  • 2026-09-25 · sector: tech to retail · seed source
  • 2026-09-25 · data_types: ["emails","names","phone","addresses"] to ["emails","names","phone","addresses","employment"] · seed source
  • 2026-09-25 · summary: In August 2026, clothing retailer Carhartt was the target of a ShinyHunters "pay or leak" extortion campaign . The group subsequently published data allegedly obtained from the company including 12.9M unique email addresses, names, phone nu to ShinyHunters published about 50 GB it said was stolen from Carhartt's Databricks analytics platform after the company declined to negotiate, and Have I Been Pwned counted 12.9 million accounts. Carhartt did not issue a statement. · seed source
  • 2026-09-25 · title: empty to ShinyHunters leaks 12.9 million Carhartt accounts from Databricks breach · seed source
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.

Everything about Carhartt

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.