ShinyHunters Claims JCPenney Retail Data Theft
ShinyHunters posted a claim on June 12 alleging theft of sensitive data from JCPenney and related retail entities under Catalyst Brands and Authentic Brands Group. The group threatened to release hundreds of thousands of records including SSNs, payroll files, and ID documents unless demands are met. This is distinct from their concurrent University of Nottingham and PeopleSoft campaigns.
- ssn
- payroll
- identity-documents
On June 12, 2026, the cybercrime group ShinyHunters publicly claimed to have stolen hundreds of thousands of sensitive records from JCPenney and several related retail entities under Catalyst Brands and Authentic Brands Group. The group posted the allegation on a leak site and threatened to release Social Security numbers, payroll files, and identity documents unless their demands were met. Anyone who has shopped at JCPenney or worked there in recent years may be affected.
Public reporting from Cybernews and ransomware tracking sites confirms that ShinyHunters presented samples of the alleged data and stated the breach covers multiple subsidiaries tied to the two brand groups. The claim is separate from the group’s simultaneous campaigns against the University of Nottingham and a PeopleSoft deployment. Available reporting describes the exposed information as including SSNs, payroll records, and scanned identity documents. JCPenney has not yet issued a formal confirmation or denial as of the latest updates.
Want the rest of this breakdown?
Sign up free to keep reading. Members get extended access, the weekly breach digest, and a complimentary Warden™ to see if their identity is exposed in the breaches we cover.
A breach leaks your credentials. Then hackers chain those credentials to your address, family, phone, and employer using public broker sites. We’re the only tool built around that chain.
⚠ Were you in this breach?
Free email scanner. We check your address against 15.4B+ leaked records in 15 seconds — then show you the $19 cleanup that removes you from the broker sites aggregating leaked data.
Check my email — free →