Every public data breach

Disclosed this week44On record26,355

44 disclosed this week · 26,355 on record

Dunkin' Brands

Disclosed Nov 28, 2018175,221 affectedConfirmed

Official notice

What is known

People affected175,221 (as reported by the organization)
DisclosedNov 28, 2018
DiscoveredJan 10, 2019
AttackNot stated
Data exposedNamesPayment cardsFinancial
SectorRetail · US
StatusConfirmed

Sources

Official noticeoag.ca.gov
California Attorney General breach notice: Dunkin' Brands
Official noticein.gov
Indiana Attorney General 2018 data breach report: Dunkin Brands
Official noticemaine.gov
Maine Attorney General breach notice archive: Dunkin' Brands

Notices filed

Residents of CANov 28, 2018
California AGCount not stated
Residents of INNov 28, 2018
Indiana AG2,118 people
Residents of MENov 28, 2018
Maine AG2,857 people
Residents of MEFeb 8, 2019
Maine AG32 people

Other breaches at Dunkin' Brands

Credential stuffing hit tens of thousands of accounts; USD 650,000 NY AG settlementCredential stuffing exposed credentials and tokens and payment cards.Credential stuffingRetailUSSep 26, 2019
History of this record
data_types2026-09-25
[] to ["names","payment-card","financial"]by backfillSource
discovered2026-09-25
empty to 2019-01-10by backfillSource
records_basis2026-09-25
empty to organizationby backfillSource
records2026-09-25
empty to 175221by backfillSource
Added2026-09-25
First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Dunkin' Brands