Panera Bread's website leaked 37 million customer records
On Monday, KrebsOnSecurity reported that Panera Bread exposed 37 million customers informtaion which includes customers email, name, physical address, birthday and the last four digits of the customer’s credit card number which was directly accessible on their website. Panera Bread said, they are trying to fix the flaw on its website. Also, they denied that the data breach exposed customers personal details.
https://t.co/Y2Phv4yUdo, the Web site for the bakery-cafe chain by the same name, leaked millions of customer records -- including names, DOBs, email/street addresses, last 4 of credit card -- until today: https://t.co/S3sIx99HyG Worst part: They were first notified 8 months ago pic.twitter.com/QBw5lj6FmD
— briankrebs (@briankrebs) April 2, 2018
Brian Krebs, is an independent investigative reporter told that the researcher Dylan Houlihan identified and informed about the data leak in Auust, 2017. But Panera didn't do anything about it until Monday which means thousands of people must have accessed and grabed the data in those eight months. Panera Bread has more than 2,000 stores in the U.S.
Also Read: Reliance Jio announces 12-month extension of benefits to Prime members
Panera Bread Chief Information Officer John Meister said, “Panera takes data security very seriously, and this issue is resolved. Following reports today of a potential problem on our website, we suspended the functionality to repair the issue. Our investigation is continuing, but there is no evidence of payment card information nor a large number of records being accessed or retrieved.”
Per my last tweet, Panera issued a statement to Fox News saying the breach only impacted 10,000 customer accounts. Interesting that they had no numbers for me, and yet had this 10k number all ready to go on the same day this was "discovered," eight months after it was reported.
— briankrebs (@briankrebs) April 2, 2018
Officer John also added, “Our investigation to date indicates that fewer than 10,000 consumers have been potentially affected by this issue, and we are working diligently to finalize our investigation and take the appropriate next steps.”
First published: 3 April 2018, 13:03 IST