Public breachBreachXposedOrNot· 1 Jun 2026
JCPenney
Domain: jcpenney.com
What happened
JCPenney, a retail department store chain, was allegedly breached in June 2026 as part of the ShinyHunters "pay or leak" campaign, exposing 879k unique email addresses along with names, phone numbers, physical addresses, genders, dates of birth, and ethnicities.
Breach facts
- Records exposed
- 879,390
- Sensitive
- No
- Industry
- Retail
- Data exposed
- Email addressesNamesPhone numbersPhysical addressesGendersDates of birthEthnicities
This page summarises publicly reported breach metadata for awareness. For account recovery or incident response, use the official guidance from the affected service.
Breach data provided by XposedOrNot.