Cyber Incident Victim: JCPenney
Date:
Jun 2026
Location:
United States of America
Summary
JCPenney and Catalyst Brands disclosed that a cybercrime group known as ShinyHunters claimed to have stolen a large volume of records containing Social Security numbers, dates of birth, W-2 tax forms, payroll records, driver's licenses, government-issued ID scans, and other personally identifiable information. The breach prompted Edelson Lechtzin LLP to launch an investigation into potential class action claims on behalf of individuals whose data may have been exposed.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 0 techniques |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
On or about June 12, 2026, JCPenney and Catalyst Brands learned of a cybersecurity incident involving their systems. A cybercrime group identified as ShinyHunters claimed to have stolen a large volume of records from the companies and threatened to publish the information unless demands were met. The companies confirmed that the compromised data may include Social Security numbers, dates of birth, W-2 tax forms, payroll records, driver's licenses, government-issued ID scans, and other personally identifiable information. Individuals whose data was affected were notified of the breach by JCPenney and Catalyst Brands. The notification informed recipients that they may face an increased risk of identity theft and fraud as a result of the exposure.
In response to the incident, the national class action law firm Edelson Lechtzin LLP announced an investigation into potential data privacy claims arising from the breach. The firm stated that it is evaluating whether to pursue a class action on behalf of individuals whose sensitive personal information may have been compromised. Edelson Lechtzin LLP is offering free case evaluations to those who wish to discuss their legal options. The firm can be contacted via phone, email, or through its website for a confidential consultation. JCPenney is described as a U.S. department store retailer that sells clothing, home products, beauty items, and services including salons and optical care, and operates under Catalyst Brands and Authentic Brands Group.