A Rowlett woman and a Dallas woman have been sentenced to 24 months each in federal prison for their roles in a scheme that used stolen customer identities and fake IDs to raid JCPenney store credit accounts across the country. Cabria Cunningham, 27, and Mykiah Furlough, 27, were also ordered to serve one year of supervised release and pay victim restitution after their sentencing on Friday.
U.S. District Judge David Hittner handed down the sentences, according to the U.S. Department of Justice, which detailed how Cunningham pleaded guilty on Sept. 5, 2025, while Furlough entered her guilty plea on Feb. 19, 2026. The case was also announced by the US Attorney SDTX on social media, the official account of the United States Attorney’s Office for the Southern District of Texas.
How the Scheme Worked at the Register
Throughout 2022 and 2023, the co-conspirators traveled to JCPenney locations nationwide, presenting stolen customer personal information along with fake identification at checkout to gain access to store-branded credit card accounts, per the DOJ’s account. Once inside those accounts, they purchased merchandise and gift cards, then resold the stolen goods on social media, according to the same release.
The scheme’s mechanics reflect a pattern federal officials have flagged well beyond this single case. Industry reporting from the National Retail Federation notes that organized retail crime rings frequently use stolen personal data to execute store credit account takeovers and obtain gift cards that are rapidly converted to cash or resold through digital marketplaces.
The Recruiter Awaits Her Own Sentencing
Federal prosecutors said Ashley Urune, 34, of Dallas — a relative of Furlough — recruited both Cunningham and Furlough into the conspiracy, per the DOJ. Urune pleaded guilty to wire fraud conspiracy and aggravated identity theft and is scheduled for sentencing on Dec. 3, 2026, the release states…