Breachesby GlyphPanera Bread
Disclosed Jan 31, 20265,112,502 accountsUnverified
Panera Bread breach via SSO vishing exposes 5.1 million accounts
ShinyHunters claimed to have stolen 14 million Panera records after voice phishing a Microsoft Entra SSO login; Have I Been Pwned found 5.1 million unique email addresses with names, phone numbers and addresses. Panera had not published a count.
What is known
| People affected | 5,112,502 (accounts in the leaked data, per Have I Been Pwned) |
|---|---|
| Disclosed | Jan 31, 2026 |
| Discovered | Dec 2025 |
| Happened | Jan 7, 2026 |
| Attack | Phishing |
| Data exposed | EmailsNamesPhone numbersAddresses |
| Sector | Retail · US |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
| Check your email | Have I Been Pwned |
Sources
Notices filed
History of this record
aggregator to pressby seedSource
https://haveibeenpwned.com/Breach/PaneraBread to https://www.bleepingcomputer.com/news/security/panera-bread-data-breach-impacts-51-million-accounts-not-14-million-customers/by seedSource
empty to USby seedSource
tech to retailby seedSource
extortion to phishingby seedSource
empty to 2025-12by seedSource
In January 2026, Panera Bread suffered a data breach that exposed 14M records . After an attempted extortion failed, the attackers published the data publicly, which included 5.1M unique email addresses along with associated account informa to ShinyHunters claimed to have stolen 14 million Panera records after voice phishing a Microsoft Entra SSO login; Have I Been Pwned found 5.1 million unique email addresses with names, phone numbers and addresses. Panera had not published a cby seedSource
empty to Panera Bread breach via SSO vishing exposes 5.1 million accountsby seedSource
First recordedby backfillSource
First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.