CuraSec

Act active

ShinyHunters publishes Carhartt data on 12.9M accounts

2026-08-27 21:01 UTC · BleepingComputer · read the source ↗ #data-breach#shinyhunters#retail
  • Engineer — Skip
  • SOC/IR — Learn: ShinyHunters continues active extortion operations; no IOCs or TTPs published from this incident to act on, but useful for tracking the group’s targeting patterns.
  • Leader — Act: If Carhartt is a vendor or employee-benefits partner, request their incident report and confirm scope of data shared; separately, brief leadership given the scale (12.9M accounts) in case customers or press ask.
This entry was curated and judged by AI (Claude) with automated enrichment (CISA KEV / EPSS / public PoC). Verify against the original source before acting. Found a bad verdict? Report it — confirmed errors go to the corrections log.