Regulator-posted notice

Breach notice filed by J.C. Penney Corporation, Inc. Pension Plan (December 2021)

Organization named: J.C. Penney Corporation, Inc. Pension Plan Provisional: identity as filed, not yet matched to the directory

What the sources say

Washington Attorney General data breach notifications Primary notice

Posted on the Washington Attorney General data breach notifications with a submission date of Dec. 20, 2021.

Organization as reported: J.C. Penney Corporation, Inc. Pension Plan
Information types as reported: Name; Full Date of Birth; Other
Incident dates as reported: Aug. 17, 2021
Submission date: Dec. 20, 2021
Observed by BreachRecords: 2026-10-19 04:57 UTC (revision 26209, page:22:row:19)
Archived copy: Held in the private archive (provenance)

The listing records a filing with the agency; it is not a finding by the agency.

Washington data breach notifications dataset (data.wa.gov sb4j-ca4h) Duplicate filing

Posted on the Washington data breach notifications dataset with a submission date of Dec. 20, 2021.

Organization as reported: J.C. Penney Corporation, Inc. Pension Plan, TX
Entity type as reported: Business
Category as reported: Cyberattack; Ransomware
Incident dates as reported: Aug. 17, 2021 to Oct. 11, 2021
Discovery date as reported: Nov. 16, 2021
Submission date: Dec. 20, 2021
Observed by BreachRecords: 2026-11-01 20:03 UTC (revision 62940, row:656)
Extraction: Parsed from a document; extraction confidence 0.85
Archived copy: Held in the private archive (provenance)

The listing records a filing with the agency; it is not a finding by the agency.

Figures, per source

1,147 individuals affected (residents of the reporting state), according to the Washington Attorney General data breach notifications, source date Dec. 20, 2021, revision observed 2026-10-19.
1,147 individuals affected (residents of the reporting state), according to the Washington data breach notifications dataset, source date Dec. 20, 2021, revision observed 2026-11-01.

Each figure is one source's figure with the basis that source gave. Figures from different sources are shown side by side and are not added, averaged or chosen between.

Timeline

Source dates are the dates the sources give. Observation dates are when BreachRecords recorded each revision.

2021-12-20Submission date (Washington Attorney General data breach notifications)
2021-12-20Submission date (Washington data breach notifications dataset)
2026-10-19Observed by BreachRecords (revision 26209)
2026-11-01Observed by BreachRecords (revision 62940)
2026-11-04Approved by a reviewer

Organizations linked by a reviewer

J.C. Penney Corporation, Inc. Pension Plan Named as the filer Provisional: identity as filed, not yet matched to the directory Linked 2026-11-04, method manual.

Archived evidence

264d45f73831ec8fc298837002b836f792a7cfd7f3d6b4d2128484a23223c042
text/csv, 453,656 bytes, retrieved from Washington data breach notifications dataset, 2026-11-01 20:03 UTC. Archived privately · Provenance · Source page
457346d36f01084d34bc27b20fe3b01bd07ac6607b2a85702246799b0e90246f
text/html, 154,956 bytes, retrieved from Washington Attorney General data breach notifications, 2026-10-19 04:57 UTC. Archived privately · Provenance · Source page

Records reflect source filings as of the dates shown. BreachRecords is not a regulator.

Request a correction

A record that disagrees with its source, names the wrong organization or duplicates another is corrected after review. This form is about Breach notice filed by J.C. Penney Corporation, Inc. Pension Plan (December 2021). We acknowledge every request within two business days. We reply by email.

The form is being set up. Check back soon.