Date of Breach
Allegation
Industry
Number Impacted
According to dark web monitoring sources, JCPenney, along with several unspecified brands belonging to Catalyst Brands and Authentic Brands Group, was recently alleged to have experienced a cyberattack by the ransomware group ShinyHunters. Our firm is investigating this matter and would like to speak with current and former employees of JCPenney to help them understand their rights and potential legal options.
On June 12, 2026, the ransomware group ShinyHunters claimed to have carried out a cyberattack on systems belonging to JCPenney, from which ShinyHunters claims to have obtained sensitive information including Social Security numbers and driver’s licenses. ShinyHunters also simultaneously claims to have obtained sensitive information belonging to “several other subsidiaries under Catalyst Brands & Authentic Brands Group.” Upon information and belief, JCPenney is part of Catalyst Brands’ (“Catalyst”) portfolio of retail companies, while Authentic Brands Group (“Authentic”) owns intellectual property associated with several retail companies owned by Catalyst. According to reporting by Cybernews, ShinyHunters issued an extortion demand threatening to release information if contact was not made by June 15, 2026.
As of publication, the alleged breach or breaches have not been confirmed by JCPenney, Catalyst, or Authentic. The associated details of the alleged breach such as time and duration of access, methods of access used, and the full scope of affected brands, companies, and information remain under investigation.
Based on the ransom group’s allegations, the types of sensitive personal information that may have been involved include:
Levi & Korsinsky, LLP is investigating whether affected individuals are entitled to compensation. If you are a user of JCPenney & Catalyst Brands at an institution affected by the Instructure, there is no cost or obligation to participate. Follow the link below to find out about your rights and potential legal remedies available.
Penney OpCo LLC d/b/a JCPenney is a retail chain with hundreds of U.S. locations, headquartered in Plano, Texas. Catalyst Brands was formed in 2025 through the merger of JCPenney and Sparc Group and operates multiple retail brands, including Aeropostale, Brooks Brothers, and Eddie Bauer. Authentic Brands Group, upon information and belief, is a shareholder in Catalyst and owns intellectual property and licensing rights associated with these brands.
UNDER THE RULES OF CERTAIN JURISDICTIONS, THIS WEBSITE MAY CONSTITUTE ATTORNEY ADVERTISING.
