The GetCarrier Breach Could Expose Your Email, Credentials, and Phone

HEROIC analysts recieved intelligence on a database breach affecting GetCarrier, a US-based logistics and auto transport provider. The breach, dated July 2021, exposed 136,377 records containing email addresses, phone numbers, password hashes, and usernames. The combination of contact data and hashed credentials in a single leak makes this incident partcularly dangerous for affected users.

How Stolen Credentials and Contact Data Put You at Risk

With email addresses, phone numbers, and password hashes in hand, attackers can launch targeted phishing campaigns, attempt credential cracking, and hijack accounts across platforms. Bcrypt hashes slow down cracking, but weak or reused passwords remain accessable to determined threat actors using modern GPU-based cracking rigs. Victims who reuse passwords across services face compounding risk.

What Was Exposed in the GetCarrier Breach

• Email Address
• Phone Number
• Password Hash (bcrypt)
• Username

Why the GetCarrier Breach Still Matters Today

Breaches involving logistics providers are high-value targets because they often hold both customer PII and operational data. Exposed phone numbers and emails enable SIM-swapping attacks and account takeover via SMS verification. The 136,377 records from this breach occured during a period of surging attacks on mid-size logistics and delivery platforms, and the data remains in circulation on dark web markets, fueling ongoing credential stuffing and identity fraud campaigns.

How Database Breaches Work

A database breach occurs when unauthorized parties gain access to a stored database, typically through SQL injection, misconfigured server permissions, exposed credentials, or unpatched software vulnerabilities. Once inside, attackers extract user records in bulk. In many cases, the stolen data is sold or published on dark web forums, where other threat actors purchase and weaponize it for follow-on attacks including phishing, credential stuffing, and account takeover.

Check If Your Data Was Exposed

HEROIC's free breach scanner searches across more than 400 billion records, including data from the GetCarrier breach, to tell you exactly what information of yours has been exposed. Run a free scan now to find out if your email, phone number, or credentials are at risk and take action before attackers do.