Threatline

Carhartt - 12,933,413 breached accounts

In August 2026, clothing retailer . The group subsequently published data allegedly obtained from the company including 12.9M unique email addresses, names, phone numbers and physical addresses. The published corpus also contained and were excluded from the breach. Carhartt was the target of a ShinyHunters "pay or leak" extortion campaign millions of synthetic records that did not relate to real individuals