Clothing Retailer Breached, Affecting 12,900,000 Accounts – Names, Addresses and More Exposed
A major clothing retailer has had millions of customer records exposed on the dark web following unsuccessful ransom talks with cybercriminals.
The breach exposed information from roughly 12.9 million accounts, reports TechRadar.
Attackers from the ShinyHunters group added Carhartt to their data leak site after negotiations broke down over a $3.3 million demand.
The company allegedly told the group it would not move forward with talks.
“After careful review and internal discussions with leadership, we have decided not to move forward with negotiations or further discussions.”
ShinyHunters stated the scale of the compromise.
“Millions of records of customer data and vast amount of sensitive information and PII containing employee, customer, customer metadata (royalty info), and other internal corporate data was compromised.”
Carhartt has not publicly confirmed the alleged breach or commented on the extortion claims. ShinyHunters claimed responsibility on August 13th, alleging that the attackers obtained more than 50GB of files containing customer, employee and corporate information.
Security researcher Troy Hunt determined the records most likely originated from Carhartt’s Databricks analytics platform.
The data included names, email addresses, phone numbers and physical addresses, though millions of synthetic records were excluded. He also identified more than 15,000 records associated with @carhartt.com employee email addresses in the leaked database.
ShinyHunters has shifted focus from encryption to data exfiltration through vishing and SaaS (software-as-a-service) platform breaches.
Carhartt operates about 60 US stores and employs roughly 3,000 people.
Follow us on X, Facebook and Telegram
Don't Miss a Beat – Subscribe to get email alerts delivered directly to your inbox
Disclaimer: Opinions expressed at The Daily Hodl are not investment advice. Investors should do their due diligence before making any high-risk investments in Bitcoin, cryptocurrency or digital assets. Please be advised that your transfers and trades are at your own risk, and any losses you may incur are your responsibility. The Daily Hodl does not recommend the buying or selling of any assets including cryptocurrencies, nor is The Daily Hodl an investment advisor. Please note that The Daily Hodl participates in affiliate marketing.
Generated Image: Midjourney
The post Clothing Retailer Breached, Affecting 12,900,000 Accounts – Names, Addresses and More Exposed appeared first on The Daily Hodl.
