JCPenney Data Breach?
Last Updated on June 17, 2026
At A Glance
- What's Going On?
- Attorneys need to hear from people who believe they may have been affected by the reported JCPenney data breach as they investigate whether a class action can be filed.
- What You Can Do
- If you are affiliated with JCPenney and believe your information may have been put at risk, fill out the form on this page to learn more about the investigation and how you can help.
- Does This Cost Anything?
- It costs nothing to get in touch or to talk to someone about your rights.
- What Can I Get?
- If filed and successful, a class action lawsuit could provide consumers with money for any harm resulting from the reported JCPenney breach.
JCPenney Data Breach?: Lawsuit Investigation
Attorneys working with ClassAction.org are looking into whether a class action lawsuit can be filed in light of reports of a possible JCPenney data breach.
As part of their investigation, they need to hear from individuals who believe their information may have been put at risk, including current and former employees of JCPenney and other Catalyst and Authentic Brands Group retail brands.
Reports Emerge of a Possible JCPenney Security Breach
Emerging reports suggest that JCPenney, along with other subsidiaries of Catalyst Brands and Authentic Brand Group, has been targeted by ransomware group ShinyHunters in a suspected data breach.
A June 12, 2026 post on dark web intelligence platform Ransomware.live indicates that ShinyHunters may have stolen hundreds of thousands of records containing sensitive personal information from the retailer. In a description of the apparent cyberattack visible on Ransomware.live’s post, ShinyHunters claims that it breached Social Security numbers, dates of birth, W-2s, payroll information, scans of government-issued IDs, and more.
Attorneys are investigating whether the potential JCPenney data breach is related to a vulnerability in Oracle PeopleSoft applications reportedly exploited by ShinyHunters, according to a June 15 article on TechRepublic.
At the time this post was made, JCPenney had not confirmed ShinyHunters' claims.
What You Can Do
If you're affiliated with JCPenney and suspect your information could have been put at risk, attorneys want to hear from you. You may be able to start a class action lawsuit to recover compensation for loss of privacy, time spent dealing with the breach, out-of-pocket costs, and more.
A successful case could also force JCPenney to ensure they take proper steps to protect the information they were entrusted with.
Suspect your information could have been exposed? Fill out the form on this page to learn more about the investigation into the reported JCPenney data breach.
Take Action
If you're concerned your information may have been exposed in the potential JCPenney data breach, fill out the form on this page to get in touch with us.
An attorney or legal representative may then reach out to you to explain more about this investigation and ask you a few questions.
Remember, there is no cost to get in touch, and you are under no obligation to take action after speaking to someone.
Published: June 17, 2026
Before commenting, please review our comment policy.
The information submitted on this page will be forwarded to Bryson Harris Suciu & DeMay PLLC who has sponsored this investigation.
Featured In:
Who Is ClassAction.org?
ClassAction.org is a group of online professionals who are committed to exposing corporate wrongdoing and giving consumers the tools they need to fight back.
We've been reporting on the legal space for nearly a decade and have built relationships with class action and mass tort attorneys across the country.
