Breaches and incidents

Panera Bread: 5.1 million customer emails published after extortion

HIBP loaded 5.1M unique emails from a 14M-record dataset (names, phone numbers, physical addresses).

Disclosed
Verification
Reported by a reputable outlet, citing the company

What happened

  • HIBP loaded 5.1M unique emails from a 14M-record dataset (names, phone numbers, physical addresses). Panera confirmed “the data involved is contact information” and said authorities were notified.
  • Root cause: not disclosed by Panera.
  • Press and trackers attribute it to ShinyHunters (claim; Panera has not named an attacker).
  • Data published after a failed extortion.