Breachesby GlyphCarhartt
Disclosed Aug 25, 202612,933,413 accountsUnverified
ShinyHunters leaks 12.9 million Carhartt accounts from Databricks breach
ShinyHunters published about 50 GB it said was stolen from Carhartt's Databricks analytics platform after the company declined to negotiate, and Have I Been Pwned counted 12.9 million accounts. Carhartt did not issue a statement.
What is known
| People affected | 12,933,413 (accounts in the leaked data, per Have I Been Pwned) |
|---|---|
| Disclosed | Aug 25, 2026 |
| Happened | Aug 13, 2026 |
| Attack | Extortion |
| Data exposed | EmailsNamesPhone numbersAddressesEmployment |
| Sector | Retail · US |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
| Check your email | Have I Been Pwned |
Sources
Notices filed
History of this record
aggregator to pressby seedSource
https://haveibeenpwned.com/Breach/Carhartt to https://www.bleepingcomputer.com/news/security/carhartt-data-breach-exposes-information-of-129-million-accounts/by seedSource
empty to USby seedSource
tech to retailby seedSource
["emails","names","phone","addresses"] to ["emails","names","phone","addresses","employment"]by seedSource
In August 2026, clothing retailer Carhartt was the target of a ShinyHunters "pay or leak" extortion campaign . The group subsequently published data allegedly obtained from the company including 12.9M unique email addresses, names, phone nu to ShinyHunters published about 50 GB it said was stolen from Carhartt's Databricks analytics platform after the company declined to negotiate, and Have I Been Pwned counted 12.9 million accounts. Carhartt did not issue a statement.by seedSource
empty to ShinyHunters leaks 12.9 million Carhartt accounts from Databricks breachby seedSource
First recordedby backfillSource
First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.