Carhartt: Security Culture: A How-to Guide for Improving Security Culture and Dealing with People Risk in Your Organisation

Carhartt Data Breach Exposes 12.9 Million Customer Accounts

A recent data breach at American apparel company Carhartt has compromised the personal information of 12.9 million customers. According to reports from data breach notification site Have I Been Pwned and the alleged threat actors, ShinyHunters, over 50 gigabytes of sensitive data were stolen. The exposed information includes names, email addresses, phone numbers, and physical addresses.

The breach was first disclosed by ShinyHunters, a notorious cybercriminal group known for large-scale data theft. While the group claims responsibility, Carhartt has yet to officially confirm the incident. The breach highlights ongoing risks in data security, particularly as threat actors continue to target high-profile organizations.

Details remain limited, but the incident underscores the growing threat of unauthorized data exfiltration and the need for robust cybersecurity measures. No further confirmation or remediation steps from Carhartt have been announced at this time.

Source: https://www.securitymagazine.com/articles/102532-129m-exposed-by-carhartt-data-breach

Carhartt cybersecurity rating report: https://www.rankiteo.com/company/carhartt

"id": "CAR1787836319",
"linkid": "carhartt",
"type": "Breach",
"date": "1/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '12.9 million',
                        'industry': 'Apparel',
                        'location': 'United States',
                        'name': 'Carhartt',
                        'type': 'Company'}],
 'data_breach': {'data_exfiltration': 'Yes',
                 'number_of_records_exposed': '12.9 million',
                 'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Names',
                                              'Email addresses',
                                              'Phone numbers',
                                              'Physical addresses']},
 'description': 'A recent data breach at American apparel company Carhartt has '
                'compromised the personal information of 12.9 million '
                'customers. Over 50 gigabytes of sensitive data were stolen, '
                'including names, email addresses, phone numbers, and physical '
                'addresses. The breach was first disclosed by the threat actor '
                'group ShinyHunters.',
 'impact': {'data_compromised': '50 GB of sensitive data',
            'identity_theft_risk': 'High'},
 'references': [{'source': 'Have I Been Pwned'}],
 'threat_actor': 'ShinyHunters',
 'title': 'Carhartt Data Breach Exposes 12.9 Million Customer Accounts',
 'type': 'Data Breach'}