ShinyHunters publishes Carhartt data on 12.9M accounts

Thu, 27 Aug 2026 21:01:55 +0000

Engineer — Skip
SOC/IR — Learn: ShinyHunters continues active extortion operations; no IOCs or TTPs published from this incident to act on, but useful for tracking the group’s targeting patterns.
Leader — Act: If Carhartt is a vendor or employee-benefits partner, request their incident report and confirm scope of data shared; separately, brief leadership given the scale (12.9M accounts) in case customers or press ask.

Retail on CuraSec