New breach: JCPenney was targeted by a ShinyHunters extortion campaign that allegedly obtained then leaked data including 368k email addresses, names, SSNs and other HR records on current and former staff. 31% were already in @haveibeenpwned@infosec.exchange. More: https://haveibeenpwned.com/Breach/JCPenney