2018 — Panerabread: Poor security / misconfiguration, 3,700,000 records
Data compromised
Personal and demographic data
Technical writeup
Customer records, including loyalty card numbers, were available via the bakery chain's website for at least 8 months.
Root cause
Poor security / misconfiguration