Catalyst Brands LLC

Summary

Catalyst Brands LLC experienced a ransomware incident affecting its HR and payroll servers. The attackers gained access to personal data including names, Social Security numbers, dates of birth, driver’s license and passport numbers, government identifiers, contact details, financial account numbers, email credentials and digital signatures. ShinyHunters claimed responsibility for the breach. An investigation later confirmed the exposure of this information. The company notified affected individuals and several state attorneys general about the incident.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

Catalyst Brands LLC experienced a ransomware incident involving its HR and payroll servers that began on May 20, 2026. The company discovered the breach on May 26, 2026. The ransomware group ShinyHunters claimed responsibility in June 2026. An investigation completed in August 2026 confirmed that attackers accessed personal information. On September 4, 2026, Catalyst Brands notified affected individuals and several state attorneys general about the breach.

The compromised information included first and last name, Social Security number, date of birth, driver’s license number, passport number, Alien Registration number, U.S. military identification number or other government‑issued identification number, contact information, financial account numbers without access information, email or username with password or security answer, and digital signature. Individuals who received a breach notification face an increased risk of identity theft and fraud.

Edelson Lechtzin LLP, a national class action law firm, launched an investigation into the data privacy claims arising from the breach and is evaluating a potential class action on behalf of affected individuals. Edelson Lechtzin LLP maintains offices in Pennsylvania and California. Catalyst Brands LLC, founded in January 2025, is a U.S. retailer and apparel company created through a partnership between JCPenney and SPARC Group.

Sources

Sources available to members: 1 source.