Carhartt data breach affects 12.9M, half of what ShinyHunters claimed

https://image.theregister.com/5292647.jpg?imageId=5292647&x=0&y=0&cropw=100&croph=100&panox=0&panoy=0&panow=100&panoh=100&width=1200&height=683

One AI and two trained eyes delved into the heavily padded leaks

Workwear and fashion retailer Carhartt’s data breach was about half as bad as ShinyHunters claimed, according to Troy Hunt, who reviewed the data dump before uploading it to his Have I Been Pwned website.

Hunt’s HIBP service reported 12.9 million individuals affected by the alleged breach, around half of what ShinyHunters purported when it claimed to leak the company’s data earlier this month.

ShinyHunters dumped what it said was 50GB worth of Carhartt’s data on August 13 after, in the criminals’ words, the retailer hired “a very unskilled and incompetent negotiator” to haggle the crooks down from their $3.3 million extortion demand.

According to Hunt, ShinyHunters data was injected with millions of lines of synthetic data, substantially padding out the number of affected individuals.

“You're not going to believe this, but turns out you can't always take...

Copyright of this story solely belongs to theregister.com. To see the full text click HERE

Read more