Democracy Dies in Darkness

Panera’s data breach puts attention on risks of loyalty programs

April 4, 2018 at 4:13 p.m. EDT
Information about Panera customers who registered for online accounts was leaked. (Patrick T. Fallon/Bloomberg News)

Panera Bread this week became the latest company hit by a data breach, acknowledging that customer information was vulnerable on its company website for at least eight months.

The records belonged to customers who had registered for the MyPanera program to order food online. The details exposed included their names, email and physical addresses, birthdays, and the last four digits of user credit card numbers, according to the security news site KrebsonSecurity. Customers’ Panera loyalty card numbers were also exposed, KrebsonSecurity reported, which scammers could potentially abuse to spend prepaid accounts.