ShinyHunters Claims Massive Panera Bread Data Breach

Panera Bread said it is probing a potential data breach following claims by the ShinyHunters ransomware group that it accessed the company’s internal network and obtained 14 million records.

 

Recently, the ShinyHunters ransomware group said it infiltrated the internal network of Panera Bread and stole 760MB of compressed files that contained 14 million records. The stolen data included customers’ names, email addresses, phone numbers, home addresses, and account details.

 

 

A recent analysis by the data breach repository Have I Been Pwned found that a breach exposed approximately 14 million records. After an attempted extortion failed, the attackers publicly released the data, which included 5.1 million unique email addresses along with associated account details such as names, phone numbers, and physical addresses.

 

Acknowledging reports of a cyber attack, a Panera Bread spokesperson told Bloomberg that a threat actor accessed a software application the company used to store data. The company has notified law enforcement and taken steps to address the incident.

 

“The data involved is contact information,” the spokesperson added.

 

In March 2024, Panera Bread suffered another significant data security incident where threat actors infiltrated its internal network and accessed the sensitive personal information of its employees. The compromised data included employees’ names and Social Security numbers and other information provided to the company in connection with their employment.

 

Panera Bread’s data security incident caused a widespread outage across all of the bakery giant’s stores in the U.S. While the company kept the stores open, customers were limited to placing orders at the register as the cyber attack affected the digital kiosks within the stores.