HackingEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTEMPLOYMENTMediumContained
Panera Bread Company
bd_5d1ae7fdc2815c45 · schema v1 · pii pii-v1
Full breach record for Panera Bread Company →Panera, LLC notified California residents of a security incident involving unauthorized access to internal files containing employee information, including names and Social Security numbers. The breach occurred between February 9 and March 23, 2024, and was detected on March 23, 2024. Panera engaged a cybersecurity firm, notified law enforcement, and offered one year of identity theft protection services to affected individuals.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_1c5d97bc067117c1Montana State AGfiled 2024-06-13Candidate
- bd_879dca8658048d03Indiana State AGfiled 2024-06-13Verified
- bd_8c1b2b55d3b5f830New Hampshire State AGfiled 2024-06-13Verified
- bd_b99c53d161d8fb93Washington State AGfiled 2024-06-13Verified
Show 1 more filing ↓Show fewer ↑
- bd_dc1f326e520ca51aMaine State AGfiled 2024-06-13Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-586888
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 13, 2024
- Raw hash
- 311f79d46d3af6b935378f9ecb50635e978fb0380abafad7ec884937c158b582
Reporting entity
- Name
- Panera Bread Companynorm: panera bread
- Domain
- panerabread.com
Victim entity
- Name
- Panera Bread Companynorm: panera bread
- Domain
- panerabread.com
Incident
- Discovered
- Mar 23, 2024
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTEMPLOYMENT
- Attack vector
- Unknown
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
Compliance
- Time to disclose
- 12 weeks(82 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.