2026 Starbucks — 176M user records forum sale claim (unverified; company investigating)
Data compromised
Alleged customer/user records (fields not independently verified)
Technical writeup
Unverified forum/marketing claim: threat-intel posts in July 2026 alleged a threat actor was selling a database of about 176 million unique Starbucks user/customer records said to have been extracted in June 2026. Separate April 2026 forum claims (~10GB, mostly non-customer content) were reviewed by CyberNews, which found no credible link to Starbucks customer data. This row tracks the larger June 2026 sale claim only. Starbucks had publicly disclosed a separate verified Partner Central phishing breach affecting 889 employees (catalogued as starbucks2026). No company confirmation of a 176M customer dump existed at indexing time—label unverified.
Root cause
Unverified dark-web sale claim (not company-confirmed)