Cascade Coffee Data Breach Exposes Social Security Numbers

Cascade Coffee LLC, a specialty coffee contract manufacturer based in Everett, Washington, disclosed a data breach that affected employee information.

The breach was reported to the Washington Attorney General on Aug. 26, 2026, with 610 Washington residents identified as potentially affected. Cascade Coffee began notifying affected individuals on Aug. 24, 2026.

Cascade Coffee learned of unusual activity involving its network environment on July 30, 2026. The company initiated an investigation with the assistance of outside cybersecurity experts to determine the nature and scope of the incident and to identify any information that may have been compromised.

The investigation determined that certain files and folders containing information pertaining to Cascade Coffee employees may have been accessed or downloaded without authorization in connection with the incident. The affected data pertained to personnel records rather than customer information.

The types of personally identifiable information exposed included names, dates of birth, Social Security numbers and other information associated with individuals' employment with Cascade Coffee.

On Aug. 20, 2026, the Akira ransomware group posted a claim on the Tor network, a portion of the dark web, stating that it had obtained data belonging to Cascade Coffee.

Cascade Coffee's response to the breach

Cascade Coffee established a toll-free call center through Cyberscout, a TransUnion company. The call center is available to answer questions about the incident and address related concerns from individuals who received a notification letter.

In addition, Cascade Coffee is offering affected Washington residents 12 months of complimentary credit and identity protection services through Cyberscout.