- ShinyHunters breached Panera Bread and stole 14 million records of customer data
- Actual power closer to 5.1 million users, with unique emails, names, phone numbers and addresses visible
- Attack linked to Microsoft Entra SSO compromise, part of wider vishing campaign targeting Okta, Microsoft and Google SSO
The latest cyber attack against Panera Bread, in which sensitive customer data was stolen, is now believed to have affected many more users than first thought
When ShinyHunters broke into Panera Bread, they stole 14 million customer records, not data about 14 million customers – but Have I Been Pwned? researchers now believe the number of people actually affected is closer to 5.1 million, after analyzing the type of information leaked on the dark web.
“In January 2026, Panera Bread suffered a data breach that exposed 14 million records,” Have You Been Pwned? explained. “After an extortion attempt failed, the attackers publicly released the data, which included 5.1 million unique email addresses along with associated account information such as names, phone numbers and physical addresses.”
Abuse of Entra SSO
The culprits behind the attack are the notorious ransomware group ShinyHunters, which added Panera Bread to its data leak site and claimed to have grabbed 760MB of compressed data that included people’s names, addresses, postal addresses and phone numbers.
shinyHunters said they broke into Panera via Microsoft Entra single sign-on (SSO). If true, then this incident is likely linked to Okta’s recent warning, in which the company said it saw cybercriminals targeting Okta, Microsoft and Google SSO codes through a sophisticated voice phishing campaign.
Panera Bread has also officially confirmed that the attackers have fallen victim.
ShinyHunters is one of the most active ransomware groups at the moment, and one of the first to completely stop using an encryption. Instead of encrypting victim systems, it simply exfiltrates data and demands payment for it. It is easier and cheaper to perform, but pays just as well.
Via Bleeping Computer
The best antivirus for all budgets
Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews and opinions in your feeds. Be sure to click the Follow button!
And of course you can too follow TechRadar on TikTok for news, reviews, video unboxings, and get regular updates from us on WhatsApp also.
