JCPenney
Data Breach on June 15, 2026
| Data Breach Report | |||
|---|---|---|---|
| Victim | jcpenney.com | ||
| Claimed By | ShinyHunters | ||
| Date Discovered | Jun 15, 2026 | ||
| Description | JCPenney is a retail company based in the USA (Texas), specializing in department store retailing, apparel, footwear, accessories, beauty products, jewelry, home furnishings, and other consumer goods. | ||
| Leak Size | Unknown |
Credential Exposure for jcpenney.com
We've indexed 21,158 @jcpenney.com accounts from external breaches, plus 16,472 credentials for jcpenney.com itself.
Last checked Sep 6, 2026
| @jcpenney.com addresses from external breaches | |
|---|---|
| Combo lists | 16,822 accounts · most recent Sep 6, 2026 |
| Third-party breaches | 9,452 accounts · across 483 breaches · 8,927 with a plaintext password · most recent Jan 31, 2026 |
| Passwords for jcpenney.com accounts | |
|---|---|
| Combo lists | 12,221 logins · most recent Sep 6, 2026 |
| Infostealer logs | 5,165 logins · 3,727 infected devices · most recent Sep 6, 2026 |
Logins may belong to customers or to staff, and the data doesn't say which. None of this is necessarily connected to the ransomware attack above.
Is your organization next?
JCPenney was breached. Check if your company's credentials have been exposed in this or other data breaches.
Check your exposure →Continuous dark web monitoring alerts you when we find leaked credentials or session tokens for your company.