← Panera Bread

2018 — Panera Bread: KrebsOnSecurity has discovered that Panera Bread…

2018 37.0M records affected Share on X

Data compromised

Personal information

Technical writeup

KrebsOnSecurity has discovered that Panera Bread left millions of customer sign-up records (possibly 37 million) in plain text on its website, including email addresses, home addresses, phone numbers and loyalty account numbers.There was no payment info, thankfully, but it would have been patently easy for evildoers to harvest that information and use it as part of identity fraud or spam campaigns.Crucially, Panera Bread didn't appear to be responsive to the problem. Houlihan notified the compan

Root cause

Unintended disclosure

References