What was exposed, when it happened, and which databases confirm it.
- accounts
- 269,299
- Breached
- April 15, 2026
- Last Update
- May 28, 2026
Were you caught in this breach?
Search your email, phone number or username against every record CheckLeaked indexes.
Your address never leaves this page: it is hashed in your browser and only a short fragment of that hash is sent.
What happened
In April 2026, the American insurance holding company Kemper Corporation was named by the ShinyHunters ransomware group in a "pay or leak" extortion campaign. The attackers allegedly accessed Kemper's Salesforce environment via social engineering as part of a broader campaign targeting hundreds of organisations using the same method. The group later published tens of gigabytes of data they claimed included internal directory data, Salesforce records and Stripe payment logs. Among the 269k unique email addresses were names, phone numbers, physical addresses and partial payment card data including the last 4 digits, expiry dates and card brands. Kemper confirmed the incident and stated they had engaged third-party cybersecurity experts and notified law enforcement.
Compromised Info
- Email addresses
- Names
- Partial credit card data
- Phone numbers
- Physical addresses
- Purchases
Attestation
Four independent databases catalog this breach and they do not always agree. Each lane below is one source’s own count.
Sources & Link Methods
- HIBP
FAQ
What was leaked in the Kemper breach?
The Kemper breach exposed: Email addresses, Names, Partial credit card data, Phone numbers, Physical addresses, and Purchases.
When did the Kemper breach happen?
The Kemper breach was disclosed on April 15, 2026 and affected 269,299 records.
Am I affected by the Kemper breach?
Search your email, phone or username at checkleaked.cc to find out whether your data appears in the Kemper leak.