Carhartt Data Breach
In August 2026, clothing retailer Carhartt was targeted by a ShinyHunters extortion campaign threatening to publish its data. The group published data it claimed to have obtained from the company.
Exposed Data Types
4- Email addresses
- Names
- Phone numbers
- Physical addresses
About This Breach
A public breach source catalogs the incident under 13 August 2026 and lists 12,933,413 unique email addresses after excluding millions of synthetic records it said did not relate to real individuals. The reported data classes are email addresses, names, phone numbers and physical addresses. BleepingComputer reported that Carhartt had not confirmed the claims at the time of its article.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
