The ShinyHunters ransomware group listed JCPenney & several other subsdiaries under Catalyst Brands & Authentic Brands Group on its data leak site on 2026-06-12. Country: US Sector: Retail & E-Commerce Claim as published on the leak site: Hundreds of thousands of records containing PII (SSN, DOB, etc.), W-2 tax records, pay data, physical scans of government identity documents, drive licenses, and a lot more was compromised. This is a final warning to reach out by 15 June 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 12 June 2026 | Warning: FINAL WARNING PAY OR LEAK