Catalyst Brands

1 breach187K affected in allRetailcatalystbrands.com

Catalyst Brands employee data stolen from third-party HR and payroll serversVendor breach exposed names, Social Security numbers, dates of birth, government IDs, financial details, credentials and tokens, emails, employment records, payment cards and addresses. Reported to the California AG.Vendor breach187K affectedRetailUSSep 4

About

Every breach here links to its sources and official notices. Across Glyph: lawsuits, incidents and outages, the company profile.

source2026-10-02

Catalyst Brands, 2026-09-04https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-October-Year-to-Date-Report-2026.pdf

source2026-09-25

Catalyst Brands, 2026-09-04https://ago.vermont.gov/categories/security-breach-notices

data_types2026-09-25

Catalyst Brands, 2026-09-04["names","ssn","dob","government-id","financial","credentials","emails","employment","payment-card","addresses"]

records_basis2026-09-25

Catalyst Brands, 2026-09-04organization

records2026-09-25

Catalyst Brands, 2026-09-04187341

attack2026-09-25

Catalyst Brands, 2026-09-04third-party

data_types2026-09-25

Catalyst Brands, 2026-09-04["names","ssn","dob","government-id","financial","credentials","emails","employment"]

summary2026-09-25

Catalyst Brands, 2026-09-04Catalyst Brands, owner of JCPenney, Brooks Brothers and other retail brands, said attackers accessed servers run by a third party supporting its HR and payroll services, obtaining SSNs, ID and passport numbers, financial account numbers and

title2026-09-25

Catalyst Brands, 2026-09-04Catalyst Brands employee data stolen from third-party HR and payroll servers

domain2026-09-25

Catalyst Brandscatalystbrands.com

attack2026-09-25

Catalyst Brands, 2026-09-04hacking

discovered2026-09-25

Catalyst Brands, 2026-09-042026-05-26

Added2026-09-25

Catalyst Brands, 2026-09-04

Added2026-09-25

Catalyst Brands