Krispy Kreme
Disclosed Dec 11, 20241 year ago161,676 affectedConfirmed
Cyberattack on Krispy Kreme disrupts US online ordering
Krispy Kreme said it was notified on November 29, 2024 of unauthorized activity on part of its IT systems, which disrupted online ordering in parts of the United States. It said the full scope and impact were not yet known.
What is known
| People affected | 161,676 (as reported by the organization) |
|---|---|
| Disclosed | Dec 11, 2024 |
| Discovered | Nov 29, 2024 |
| Attack | Hacking |
| Data exposed | Names, Social Security numbers, Financial, Other |
| Sector | Retail · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Krispy Kreme, Inc. Form 8-K, Item 1.05 (2024-12-11)sec.gov · SEC filing | SEC filing |
| Krispy Kreme says November data breach impacts over 160,000 peoplebleepingcomputer.com · News | News |
| Krispy Kreme notice of data breachkrispykreme.com · The organization | The organization |
| Krispy Kreme discloses cyberattack that is disrupting online orderstechcrunch.com · News | News |
Notices filed
History of this record
- 2026-09-25 · data_types: ["names","ssn","financial"] to ["names","ssn","financial","other"] · seed source
- 2026-09-25 · discovered: empty to 2024-11-29 · seed source
- 2026-09-25 · summary: Krispy Kreme told Maine's attorney general that its November 2024 cyberattack affected 161,676 people; a Massachusetts filing said stolen documents included SSNs and financial account information. to Krispy Kreme said it was notified on November 29, 2024 of unauthorized activity on part of its IT systems, which disrupted online ordering in parts of the United States. It said the full scope and impact were not yet known. · seed source
- 2026-09-25 · title: Krispy Kreme says November 2024 breach affected 161,676 people to Cyberattack on Krispy Kreme disrupts US online ordering · seed source
- 2026-09-25 · sector: other to retail · seed source
- 2026-09-25 · attack: unknown to hacking · seed source
- 2026-09-25 · data_types: [] to ["names","ssn","financial"] · seed source
- 2026-09-25 · records_basis: empty to organization · seed source
- 2026-09-25 · records: empty to 161676 · seed source
- 2026-09-25 · summary: empty to Krispy Kreme told Maine's attorney general that its November 2024 cyberattack affected 161,676 people; a Massachusetts filing said stolen documents included SSNs and financial account information. · seed source
- 2026-09-25 · title: Material cybersecurity incident reported to the SEC (8-K Item 1.05) to Krispy Kreme says November 2024 breach affected 161,676 people · seed source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (SEC 8-K), confirmed by SEC 8-K. Record counts are as reported. Not legal advice.