Krispy Kreme Doughnut
Disclosed Jun 16, 20251 year ago161,676 affectedConfirmed
What is known
| People affected | 161,676 (as reported by the organization) |
|---|---|
| Disclosed | Jun 16, 2025 |
| Discovered | May 22, 2025 |
| Happened | Nov 19, 2024 |
| Attack | Not stated |
| Data exposed | Names, Government IDs, Health, Insurance, Credentials and tokens |
| Sector | Other · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Krispy Kreme Doughnutoag.ca.gov · Official notice | Official notice |
| Notice letter filed with the Delaware DOJ: Krispy Kreme Doughnutattorneygeneral.delaware.gov · Official notice | Official notice |
| Vermont Attorney General: 2025-06-16 Krispy Kreme Doughnut Corporation Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| Indiana Attorney General 2025 data breach report: Krispy Kreme Doughnutin.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Delaware DOJresidents of DE | Jun 16, 2025 | 847 |
| Vermont AGresidents of VT | Jun 16, 2025 | |
| Indiana AGresidents of IN | Jun 16, 2025 | 4,810 |
| California AGresidents of CA | Jun 17, 2025 |
History of this record
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 161676 · backfill source
- 2026-09-25 · source: empty to https://ago.vermont.gov/document/2025-06-16-krispy-kreme-doughnut-corporation-data-breach-notice-consumers · backfill source
- 2026-09-25 · data_types: [] to ["names","government-id","health","insurance","credentials"] · backfill source
- 2026-09-25 · disclosed: 2025-06-17 to 2025-06-16 · backfill source
- 2026-09-25 · discovered: empty to 2025-05-22 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.