Panera Bread data breach
Was I affected?
Panera Bread confirmed a breach affecting about 5.1 million email addresses, exposing names, email addresses, phone numbers and addresses. You may be affected if you have a MyPanera or Panera online ordering account; check your email on Have I Been Pwned.
| Announced | Jan 29, 2026 |
|---|---|
| When it happened | January 2026 |
| Email addresses exposed | 5.1 million |
| Data exposed | Names, Email addresses, Phone numbers and Addresses |
| Status | Confirmed by the company or a regulator filing |
What happened
The ShinyHunters group leaked Panera Bread data in January 2026 after a failed extortion attempt, claiming 14 million records; Have I Been Pwned found about 5.1 million unique customer emails with names, phone numbers and addresses. Panera confirmed the incident to authorities and said the data involved was contact information. Reporting tied it to a vishing campaign against single sign-on accounts.
What should I do?
- Treat emails, texts and calls that mention Panera, MyPanera rewards or Unlimited Sip Club as suspect; don't click links or share codes, and contact the company through its official app or website.
- Change your MyPanera password and any other account that uses the same password, and turn on two-step verification.
- Be cautious of calls or texts that quote your address or phone number to seem legitimate.
Check whether your email address is in this breach on Have I Been Pwned (breach data from haveibeenpwned.com, CC BY 4.0).
Check the other services you use →
Sources
- Panera Bread data breach impacts 5.1 million accounts, not 14 million customers · BleepingComputer (news)
- Panera hit with three class actions over January data breach · Bloomberg Law (news)