/
← Voltar ao feed
medium retail

ShinyHunters 'pay or leak' extortion leaks Carhartt data; 12.9M email addresses added to Have I Been Pwned

1 fonte(s) · 1 atualização(ões) · publicado 25/08/2026 18:34 · coletado há 1 dia

In August 2026, clothing retailer Carhartt was targeted in a ShinyHunters "pay or leak" extortion campaign. The group published data allegedly taken from the company, including 12.9M unique email addresses, names, phone numbers and physical addresses. The leaked corpus also held millions of synthetic records unrelated to real individuals, which were excluded from the breach. Have I Been Pwned added the dataset on 25 Aug 2026.

Technical Details

  • Extortion model: "pay or leak" by ShinyHunters, followed by publication of the data.
  • Exposed data: email addresses, names, phone numbers and physical addresses (12.9M unique emails).
  • The article does not describe the initial access method.
  • Breach occurred in August 2026; added to HIBP on 25 Aug 2026.

Remediation

  • Check exposure through Have I Been Pwned.
  • Use a password manager to generate strong, unique passwords, and change any reused passwords.
  • Enable 2FA wherever supported.
  • Be alert to phishing and smishing aimed at the exposed contact details.

Linha do tempo

  1. haveibeenpwned.com ↗ · pub. 25/08/2026 18:34 · coletado 19/10 17:56 primeiro registro

    ShinyHunters 'pay or leak' extortion leaks Carhartt data; 12.9M email addresses added to Have I Been Pwned

    ler a análise desta fonte

    In August 2026, clothing retailer Carhartt was targeted in a ShinyHunters "pay or leak" extortion campaign. The group published data allegedly taken from the company, including 12.9M unique email addresses, names, phone numbers and physical addresses. The leaked corpus also held millions of synthetic records unrelated to real individuals, which were excluded from the breach. Have I Been Pwned added the dataset on 25 Aug 2026.

    Technical Details

    • Extortion model: "pay or leak" by ShinyHunters, followed by publication of the data.
    • Exposed data: email addresses, names, phone numbers and physical addresses (12.9M unique emails).
    • The article does not describe the initial access method.
    • Breach occurred in August 2026; added to HIBP on 25 Aug 2026.

    Remediation

    • Check exposure through Have I Been Pwned.
    • Use a password manager to generate strong, unique passwords, and change any reused passwords.
    • Enable 2FA wherever supported.
    • Be alert to phishing and smishing aimed at the exposed contact details.