Data breach
Panera Bread data breach
In 2026, Panera Bread suffered a data breach affecting 5,847,633 records. Exposed data included email addresses, phone numbers, addresses and 2 other types of data.
Breach date
5.8 million
Records in the breach
5
Types of data exposed
Were you affected by the Panera Bread breach?
Enter your email address to see whether it appears in this breach — or any of the other breaches in Leak Database.
Data exposed in the Panera Bread breach
- Email Addresses
- Phone Numbers
- Addresses
- Names
- Surname
About the breach
Panera Bread suffered a major data breach in January 2026 after the ShinyHunters extortion group compromised a Microsoft Entra single-sign-on (SSO) code and leaked a massive archive of customer and employee data.
Breach Overview
• Date of Incident: January 2026
• Attacker: ShinyHunters (extortion group using voice phishing/vishing and SSO compromise)
• Exposed Data:
• Around 5.1 million unique customer email addresses
• Customer names, phone numbers, and physical/home addresses
• Personal data of over 26,000 employees (including employee email addresses)
• What was NOT exposed: Panera confirmed that payment card numbers, financial data, and account passwords were not accessed in the attack.
What Happened
1. The Attack: Hackers used vishing and SSO manipulation to bypass authentication and access Panera Bread's cloud-based environment.
2. Extortion & Leak: After Panera did not meet extortion demands, ShinyHunters published a large data archive on a Tor-based leak site.
3. Risks to Consumers: The leaked contact and identity information creates high risks for phishing scams, targeted phone/vishing scams, and credential-stuffing attacks on other services where users may have reused passwords
Breach Overview
• Date of Incident: January 2026
• Attacker: ShinyHunters (extortion group using voice phishing/vishing and SSO compromise)
• Exposed Data:
• Around 5.1 million unique customer email addresses
• Customer names, phone numbers, and physical/home addresses
• Personal data of over 26,000 employees (including employee email addresses)
• What was NOT exposed: Panera confirmed that payment card numbers, financial data, and account passwords were not accessed in the attack.
What Happened
1. The Attack: Hackers used vishing and SSO manipulation to bypass authentication and access Panera Bread's cloud-based environment.
2. Extortion & Leak: After Panera did not meet extortion demands, ShinyHunters published a large data archive on a Tor-based leak site.
3. Risks to Consumers: The leaked contact and identity information creates high risks for phishing scams, targeted phone/vishing scams, and credential-stuffing attacks on other services where users may have reused passwords
How to protect yourself
In order to start protecting yourself from possible fraud in future, we highly recommend the following steps:
1. Monitor your credit reports for possible suspicious activities. If you cannot do this yourself, we recommend you sign up with online services that does this on your behalf.
2. Be on the lookout for an increase in spam or fraudulent calls. We recommend you make use of mobile apps like True Caller, which can assist you in identifying potential spam or fraudulent calls.
3. Monitor your banking transactions. Ensure that you are receiving notifications of transactions by either SMS, your app or email.
1. Monitor your credit reports for possible suspicious activities. If you cannot do this yourself, we recommend you sign up with online services that does this on your behalf.
2. Be on the lookout for an increase in spam or fraudulent calls. We recommend you make use of mobile apps like True Caller, which can assist you in identifying potential spam or fraudulent calls.
3. Monitor your banking transactions. Ensure that you are receiving notifications of transactions by either SMS, your app or email.
Get told about the next breach
A free Leak Database account emails you when your address appears in a newly added breach.