Krispy Kreme Data Breach Investigation

Shamis & Gentile P.A., one of the nation's premier class action law firms specializing in data breach cases, is investigating the Krispy Kreme Doughnut Corporation data breach.
If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation.
About Krispy Kreme Doughnut Corporation
Krispy Kreme Doughnut Corporation is a well-known American multinational company in the food and beverage industry. Founded in 1937 in Winston-Salem, North Carolina, Krispy Kreme produces yeast-raised doughnuts.
Krispy Kreme has a presence in more than 30 countries, operating thousands of locations and partnering with major retailers. The company is headquartered in Charlotte, North Carolina, and employs nearly 3,000 people, according to LinkedIn.
What Happened?
In late November 2024, Krispy Kreme Doughnut Corporation discovered a data breach. The cyberattack disrupted the Krispy Kreme online ordering system and on May 22, 2025, Krispy Kreme determined that certain personal information belonging to consumers was impacted by the data incident.
Possible Exposed Online Customer Information
- Name
- Phone Number
- Email Address
- Payment card information
Krispy Kreme disclosed the breach to the U.S. Securities and Exchange Commission on December 11, 2024, and to the Vermont and Massachusetts Attorney Generals' offices on June 17, 2025. Affected individuals were notified.
Your Rights and Next Steps
If you received a Krispy Kreme notification about this data breach, you have important rights. You are entitled to free credit monitoring, and possible financial compensation.
Here’s what you can do next:
- Identity monitoring services: Sign up for the free Kroll identity monitoring services offered in the notice you received.
- Monitor your accounts carefully: Check your financial statements regularly for suspicious activity or unauthorized transactions. If you notice anything unusual, contact your financial institution immediately.
- Fraud alert and credit reports: A fraud alert informs creditors to take extra steps to verify your identity before opening new accounts in your name. Consumers are also entitled to one free credit report annually from each credit bureau. You can request a fraud alert or a credit report by contacting any one of the three major credit bureaus.
- Seek legal help: Lawyers are ready to help you understand your rights and pursue compensation.
Lawyers are ready to help you understand your rights and determine if you are eligible to join a class action lawsuit for compensation related to this breach.
You May Be Entitled to Compensation
If your information was affected by the Krispy Kreme data breach, you may be entitled to compensation for any harm or inconvenience you’ve experienced. Lawyers are investigating claims on behalf of individuals whose information was exposed.
To find out if you qualify to join a lawsuit, complete the form below.