TLDR Tech / InfoSec
A Cautionary Tale About Data Breach Claims, Verification and Carhartt
Troy Hunt investigated ShinyHunters' claim of a 24.8 million-record data breach at Carhartt and discovered the dataset was heavily contaminated with synthetic information. Through AI-assisted and manual verification, Hunt identified TPC-DS benchmark data, Microsoft 365 routing duplicates, and highly uniform birth distributions. This forensic analysis reduced the actual number of compromised records to roughly 12.9 million. Hunt concluded that while Carhartt suffered a genuine breach, the threat actors likely exfiltrated a Databricks instance where production customer records were stored alongside unlabeled test data rather than fabricating the dump outright.
Read the full story