Kemper
kemper.com
Vérifiée
Résumé
Cette fuite a exposé : adresses e-mail, noms et prénoms, partial credit card data, numéros de téléphone, adresses postales et historique d'achats.
- Date de la fuite :
- Ajoutée à la base le :
- Comptes concernés :
- 269 299 comptes
Données exposées
- Adresses e-mail
- Noms et prénoms
- Partial credit card data
- Numéros de téléphone
- Adresses postales
- Historique d'achats
Description de la source
Texte original rédigé en anglais par Have I Been Pwned, reproduit sans traduction.
In April 2026, the American insurance holding company Kemper Corporation was named by the ShinyHunters ransomware group in a "pay or leak" extortion campaign. The attackers allegedly accessed Kemper's Salesforce environment via social engineering as part of a broader campaign targeting hundreds of organisations using the same method. The group later published tens of gigabytes of data they claimed included internal directory data, Salesforce records and Stripe payment logs. Among the 269k unique email addresses were names, phone numbers, physical addresses and partial payment card data including the last 4 digits, expiry dates and card brands. Kemper confirmed the incident and stated they had engaged third-party cybersecurity experts and notified law enforcement.