Goose Creek

DISCLOSED 2026-06-09 · STOLEN CREDS · 6,574,121 RECORDS EXPOSED

In June 2026, a party claiming to have access to data from Goose Creek Candle Company sent emails to a number of the company's customers, claiming the company had a security vulnerability and suffered a data breach. The data was subsequently sent to Have I Been Pwned and contained 6.6M unique email addresses along with names, phone numbers, physical addresses, order IDs and...

The record

What we know

Disclosed

2026-06-09

Attack vector

Stolen Creds

Records exposed

6,574,121

Domain

goosecreek.com

Data classes exposed

Email addressesNamesPhone numbersPhysical addressesPurchases

Sources

Cited reporting

↗ Have I Been Pwned (2026-07-15)

Similar vector · recent

Other stolen creds breaches on file

This page is the permanent ColdRecon entry for the Goose Creek disclosure. It updates if new public reporting emerges. All tracked breaches →

Goose Creek just lived through this. Your next prospect doesn't have to.

ColdRecon turns every disclosed breach into a daily intelligence brief from the seller's seat — normalized to the factors that move a deal, written in the Handler's voice. Request clearance and the first lands tomorrow at 0600.

Request Clearance →