Panera Bread
Disclosed Jan 31, 20267 months ago5,112,502 accountsUnverified
Panera Bread breach via SSO vishing exposes 5.1 million accounts
ShinyHunters claimed to have stolen 14 million Panera records after voice phishing a Microsoft Entra SSO login; Have I Been Pwned found 5.1 million unique email addresses with names, phone numbers and addresses. Panera had not published a count.
What is known
| People affected | 5,112,502 (accounts in the leaked data, per Have I Been Pwned) |
|---|---|
| Disclosed | Jan 31, 2026 |
| Discovered | Dec 2025 |
| Happened | Jan 7, 2026 |
| Attack | Phishing |
| Data exposed | Emails, Names, Phone numbers, Addresses |
| Sector | Retail · US |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
| Check your email | Have I Been Pwned |
Sources
| Source | |
|---|---|
| Have I Been Pwned: Panera Breadhaveibeenpwned.com · Aggregator | Aggregator |
| Panera Bread breach impacts 5.1 million accounts, not 14 million customersbleepingcomputer.com · News | News |
Notices filed
| Where | Filed | People |
|---|---|---|
| Have I Been Pwnedaccounts in the data | Jan 31 | 5,112,502 |
| Researchtotal | Feb 2 |
History of this record
- 2026-09-25 · source_type: aggregator to press · seed source
- 2026-09-25 · source_url: https://haveibeenpwned.com/Breach/PaneraBread to https://www.bleepingcomputer.com/news/security/panera-bread-data-breach-impacts-51-million-accounts-not-14-million-customers/ · seed source
- 2026-09-25 · country: empty to US · seed source
- 2026-09-25 · sector: tech to retail · seed source
- 2026-09-25 · attack: extortion to phishing · seed source
- 2026-09-25 · discovered: empty to 2025-12 · seed source
- 2026-09-25 · summary: In January 2026, Panera Bread suffered a data breach that exposed 14M records . After an attempted extortion failed, the attackers published the data publicly, which included 5.1M unique email addresses along with associated account informa to ShinyHunters claimed to have stolen 14 million Panera records after voice phishing a Microsoft Entra SSO login; Have I Been Pwned found 5.1 million unique email addresses with names, phone numbers and addresses. Panera had not published a c · seed source
- 2026-09-25 · title: empty to Panera Bread breach via SSO vishing exposes 5.1 million accounts · seed source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.