Cyber Incident Victim: Kemper Corporation
Date:
Apr 2026
Location:
United States of America
Summary
Kemper Corporation confirmed a cybersecurity incident after the hacker group ShinyHunters posted alleged files from its Salesforce account on the dark web, claiming to have stolen 29 gigabytes of data. The exposed information includes internal corporate documents, employee training materials, employee names and email addresses, and Stripe payment logs containing customer names and transaction amounts. The company said it is aware of the breach, has launched an investigation and notified law enforcement. Individuals who received a breach notification may face an increased risk of identity theft and fraud, and a national class action law firm is investigating potential legal claims on their behalf.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 0 motives | 1 technique |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
On or about April 15, 2026, the hacker group ShinyHunters posted alleged files from Kemper Corporation on a dark web site. The group claimed to have exfiltrated approximately 29 gigabytes of data from the company's Salesforce account. Kemper Corporation acknowledged the cybersecurity incident and stated that it had launched an internal investigation. The company also reported that it had notified law enforcement authorities about the breach.
According to the breach notification, the exposed information may include internal corporate documents, employee training materials, employee names, and email addresses. Additionally, Stripe payment logs containing customer names and transaction amounts were among the data allegedly taken. Individuals who received a data breach notice from Kemper Corporation were advised that they could face an increased risk of identity theft and fraud.
Edelson Lechtzin LLP, a national class action law firm, announced that it is investigating data privacy claims arising from the Kemper Corporation breach and is offering free case evaluations to affected individuals. Kemper Corporation is described as one of the nation's leading specialized insurers, with approximately $12 billion in assets, providing insurance through its Kemper Auto and Kemper Life brands. The law firm maintains offices in Pennsylvania and California and handles a range of class and collective actions including securities fraud, antitrust violations, ERISA matters, wage theft, and consumer fraud.