Kemper data breach
269,299 accounts exposed.
Check whether your email is included on Have I Been Pwned.
What was exposed
What to do
- Expect more phishing emails that mention this service. Do not click links in them; go to the site directly.
- Be wary of texts and calls that seem to know your details.
- Check your bank and card statements, and ask your bank about a new card if you see anything odd.
- Turn on two-step verification wherever it is offered, and use a password manager.
About this breach
In April 2026, the American insurance holding company Kemper Corporation was named by the ShinyHunters ransomware group in a "pay or leak" extortion campaign. The attackers allegedly accessed Kemper's Salesforce environment via social engineering as part of a broader campaign targeting hundreds of organisations using the same method. The group later published tens of gigabytes of data they claimed included internal directory data, Salesforce records and Stripe payment logs. Among the 269k unique email addresses were names, phone numbers, physical addresses and partial payment card data including the last 4 digits, expiry dates and card brands. Kemper confirmed the incident and stated they had engaged third-party cybersecurity experts and notified law enforcement.