.png)
Catalyst Brands Data Breach Lawsuit Investigation
Shamis & Gentile P.A., one of the nation's premier class action law firms specializing in data breach cases, is investigating the Catalyst Brands Llc data breach.
If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation.
About Catalyst Brands
Catalyst Brands LLC is a U.S. retail holding company formed in 2025 through the merger of JCPenney and SPARC Group. The company operates as a platform for several well-known apparel and lifestyle brands, including Aéropostale, Brooks Brothers, Eddie Bauer, Lucky Brand, Nautica and JCPenney.
Headquartered in Plano, Texas, Catalyst Brands manages a diverse range of brands that cater to various segments of the American market.
What Happened?
On or around May 26, 2026, Catalyst Brands discovered a cybersecurity incident involving unauthorized access to certain servers managed by a third party that supports the company’s HR and payroll-related services.
After an investigation, it was determined on Aug. 5, 2026, that an unauthorized third party obtained personal information connected to this incident.
The breach was reported to the California Attorney General on Sept. 4, 2026.
Notably, the hacking group ShinyHunters claimed responsibility for the attack, which was posted on the dark web network tor on June 12, 2026, and involved a ransomware incident.
Information Exposed:
- First and last names
- Social Security numbers
- Dates of birth
- Driver’s license numbers
- Passport numbers
- Alien Registration numbers (A-numbers)
- U.S. military identification numbers
- Other government-issued identification numbers
- Contact information
- Financial account numbers (without access information)
- Emails or usernames with passwords or security answers
- Digital signatures
You May Be Entitled to Compensation
If your information was compromised in the Catalyst Brands Llc data breach, you may be eligible for compensation. Laws exist to protect individuals whose sensitive data is exposed due to a company’s failure to safeguard it. Lawyers are ready to help affected individuals pursue their legal rights and seek compensation for any harm suffered as a result of this breach.
To find out if you qualify to join a lawsuit related to this data breach, complete the below form.
.svg)