UnknownOtherAuthenticationFinancial accountHealth (basic)Government IDMedium

KIRSPY KREME DOUGHNUT CORPORATION

bd_5320a25e3553b602 · schema v1 · pii pii-v2

Severity

Medium

Discovered

May 22, 2025

Filed

Jun 1, 2025

To disclose

—

Affected

Withheld by the regulator

Confidence

95%

Full breach record for KIRSPY KREME DOUGHNUT CORPORATION →

KIRSPY KREME DOUGHNUT CORPORATION filed a data-breach notice with the Illinois Attorney General in June 2025 (case 25-06-266). The register records the breach as discovered on May 22, 2025. Personal information types reported: drivers license, financial account number, medical information, ssn, username password. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

J jump to incidentP pin to compareR raw source

Incident timeline

May 22, 2025

Discovered

Jun 1, 2025

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: KIRSPY KREME DOUGHNUT CORPORATION
norm: kirspy kreme doughnut

Name: KIRSPY KREME DOUGHNUT CORPORATION
norm: kirspy kreme doughnut
Industry: Otherllm

Discovered: May 22, 2025
Materiality determined: —
Notification sent: —
Affected individuals: Withheld by the regulator
Data types: AuthenticationFinancial accountHealth (basic)Government ID
Data elements: Driver's licence numberFinancial account numberMedical informationSocial Security numberUsername + password
Attack vector: Unknown

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://databreachnoticetoattorneygeneral.illinoisattorneygeneral.gov/
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 1, 2025
Raw hash: 57a13c45372d5a33e690ea2b1a4f1f294692980f23bd46276371402908cb1b3e

Reporting entityKIRSPY KREME DOUGHNUT CORPORATION

Victim entityKIRSPY KREME DOUGHNUT CORPORATION

Incidentdiscovered May 22, 2025

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedatabreachnoticetoattorneygeneral.illinoisattorneygeneral.gov