2018 — Panera Bread: Customer records were available via the site for at…
Technical writeup
Customer records were available via the site for at least 8 months. Panerabread were alerted to the leak in Aug 2017, but didn't pull the site until Apr 2018. Panerabread claims 10k records were leaked, but security researchers put the figure at over 37 million.
Root cause
Poor security