Panera Bread 2026 Customer Data Breach

Panera Bread, a major retail food service chain, experienced a data breach in January 2026 that exposed 5.1 million unique email addresses from a total of 14 million records. The breach occurred when attackers attempted extortion and subsequently published the data publicly after their demands were not met. The company confirmed the incident involved contact information and notified relevant authorities.

The breach resulted in unauthorized access to customer account information, with attackers exfiltrating personally identifiable information including email addresses, names, phone numbers, and physical addresses. The data was published following a failed extortion attempt, though the specific initial access vector and exploitation techniques were not detailed in the available information. The exposure of comprehensive contact information for millions of customers represents significant privacy and security implications.

Panera Bread confirmed the data involved contact information and stated that authorities were notified about the breach. The company's acknowledgment came after attackers published the data publicly when their extortion attempt failed, though no specific containment or remediation milestones were detailed in the available reporting.