July 2026 threat-intel posts claimed a seller was offering 176 million Starbucks user records allegedly extracted in June 2026. At indexing time, Starbucks had not confirmed any customer dump of that scale.
This is separate from Starbucks’ verified 889-employee Partner Central phishing breach disclosed earlier in 2026. CyberNews previously reviewed an April forum claim (~10GB) and found smoothie-machine firmware—not customer PII.
How to read the claim
Treat the 176M figure as an unverified marketing number until HIBP, a regulator notice, or Starbucks attests it. Forum sellers routinely inflate counts.
Action items
- Starbucks Rewards users: rotate passwords and enable MFA regardless—cheap insurance.
- Ignore “Starbucks class action refund” texts linking to look-alike sites.
Canonical record
https://breachhistory.com/starbucks/starbucks-forum176m2026 (unverified claim row).