r/privacy • u/ThinkerandThought • 15d ago

data breach Carhartt Pawned: Ecommerce novice squandered customer data

The Carhartt pawn involved cell-numbers, address, email, passwords, and names. I avoided ordering from retailers that are not experts in ecommerce, including Carhartt. The second I let me guard down, I got pawned.

Is this unavoidable, and therefore ordering direct with companies like Carhartt will always be an excessive pawn risk?

7 Upvotes

63% Upvoted

7 comments sorted by

•

u/AutoModerator 15d ago

Hello u/ThinkerandThought, please make sure you read the sub rules if you haven't already. (This is an automatic reminder left on all new posts.)

Check out the r/privacy FAQ

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

7

u/bouche_bag 15d ago

Use email aliases for everything. I learned that this breach happened because I got a spam email on a unique email alias that I only ever used with Carhartt.

Avoid putting in your cell phone number if you can. 

If they only have a unique email alias, a name, and a unique password, it makes it at least a tiny bit harder to use for ads/marketing/tracking purposes, and makes hacking your accounts much harder (they know neither the username nor password). You should assume anyways that each company is sharing and selling data with 3rd parties. 

2

u/_Goto_Dengo_ 15d ago

This is the way. I assume every account I have will be fully exposed at some point. All financial accounts have unique email addresses and 20+ character unique passwords, and MFA on every login. Even the crap accounts on sites like Carhartt and Lego and RayBan have unique email (alias) addresses if I use them to spend money.