Krispy Kreme Data Breach Affects 161,676 Individuals

Krispy Kreme Doughnut Corporation experienced a cybersecurity attack that impacted it's online ordering system, which remained disrupted for several days. The data breach was discovered on November 29, 2024.

According to news reports, it took approximately one month to resolve the system error disruption due to unauthorized activity. An investigation was launched and on May 22, 2025, it was determined that the personal information of 162,676 individuals.

Exposed customer and employee information may include name, Social Security number, date of birth, driver’s license or state ID number, financial account information, financial account access information, credit or debit card information, credit or debit card information in combination with a security code, username and password to a financial account, passport number, digital signature, username and password, email address and password, biometric data, USCIS or Alien Registration Number, US military ID number, medical or health information, and health insurance information.

Affected employees and customers include 7,266 residents of South Carolina, 6,948 of Texas, 179 of Massachusetts, 125 of Rhode Island and 21 of Maine.

Krispy Kreme filed a cybersecurity incident report with the SEC on December 11, 2024. The data breach was disclosed to the California, Maine, Massachusetts, New Hampshire, Rhode Island, South Carolina, Texas, Vermont attorneys general offices beginning on June 17, 2025.

Krispy Kreme's response

Krispy Kreme initiated an investigation and notified law enforcement. Krispy Kreme has notified affected individuals and published a notice of data breach on its own website.

If you have received a data breach notification from Krispy Kreme, you may want to:

• Sign up for the Kroll identity monitoring services offered, paid for by Krispy Kreme.
• Monitor your credit reports and financial accounts for any unusual activity.
• Be alert for phishing emails or phone calls that may use your exposed information.
• Consider placing a fraud alert or credit freeze with major credit bureaus.