A Cautionary Tale About Data Breach Claims, Verification and Carhartt

A deep-dive into how a claimed 24.8 million record Carhartt data breach from ShinyHunters was investigated and found to be massively inflated. Using an AI assistant (dubbed 'PwnedClaw') alongside manual analysis, the investigator discovered the dump was contaminated with TPC-DS synthetic benchmark data mixed in with Databricks-hosted real customer records. Through iterative filtering—removing synthetic domains, Microsoft 365 alias duplicates, deactivated accounts, test domains, and perftest data—the real unique address count dropped from over 24.8 million to roughly 12.9 million. Sub-address analysis (+carhartt, +paypal tags) ultimately confirmed the data genuinely originated from Carhartt, illustrating the importance of rigorous verification before publishing breach headline numbers.

Source: https://www.troyhunt.com/a-cautionary-tale-about-data-breach-claims-verification-and-carhartt. 8 Sync News only summarizes and links out; content copyright belongs to the authors and original sources.