UnknownRetail & ConsumerRetailGovernment IDFinancial accountMedium

Krispy Kreme Doughnut Corporation

bd_65362ff1582efe02 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Jun 17, 2025

To disclose

—

Affected

179state residents only

Linked

11 filings

Confidence

95%

Full breach record for Krispy Kreme Doughnut Corporation →

Krispy Kreme Doughnut Corporation reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-06-17. 179 Massachusetts residents were affected.

J jump to incidentP pin to compareR raw source

Massachusetts clock✓ MA credit monitoring due

⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Incident timeline — partial

? — ?

Breach window unknown

Jun 17, 2025

Filed

—

Corroborated · see linked filings

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

This filing is one of 11 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Rhode Island State AGbd_a58e9e0b70ac44ec2025-06-17Verified
California State AGbd_bbd9bb1e831f985e2025-06-17Candidate
New Hampshire State AGbd_53b697732f6e933e2025-06-18 · +1dVerified
South Carolina State AGbd_a377bfb677b7e83f2025-06-18 · +1dVerified

Show 6 more filings ↓up to 16d gap

Texas State AGbd_b0dd709ac92a96cf2025-06-18 · +1dVerified by operator
Maine State AGbd_fa81ee53b98afb242025-06-18 · +1dVerified by operator
Indiana State AGbd_0d261f83a1177f1a2025-06-16 · +1dVerified
Vermont State AGbd_19e91671f3e66bc82025-06-16 · +1dVerified
Delaware State AGbd_f982d429044108292025-06-16 · +1dVerified
Illinois State AGbd_942423996e40aa312025-06-01 · +16dVerified

Name: Krispy Kreme Doughnut Corporation
norm: krispy kreme doughnut
Domain: krispykreme.com

Name: Krispy Kreme Doughnut Corporation
norm: krispy kreme doughnut
Domain: krispykreme.com
Industry: Retail & Consumerregulator portal

Discovered: —
Materiality determined: —
Notification sent: —
Affected individuals: 179state-resident count only
Data types: Government IDFinancial account
Data elements: Social Security numberFinancial account numberDriver's licence number
Stated not affected: Medical informationPayment card number
The filing states these were not involved. Categories absent from both lists were not addressed either way.
Attack vector: Unknown

Compliance flags: MA credit monitoring due
Discovery-date grounding: no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 11 states

View merged incident ↗

Illinois State AGJun 1 · first

Indiana State AG+15d

Vermont State AG+15d

Delaware State AG+15d

Rhode Island State AG+16d

California State AG+16d

Massachusetts State AG+16d · this page

New Hampshire State AG+17d

South Carolina State AG+17d

Texas State AG+17d

Maine State AG+17d

Pattern: first filing Jun 1 (IL), last Jun 18 (ME) — a 17-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/data-breach-report-2025/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 17, 2025
Raw hash: a7bd6d2d4eab0ae8e28bae8840caa7f2b8f58c2da4fac459c8c0270fb5127faf

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityKrispy Kreme Doughnut Corporation

Victim entityKrispy Kreme Doughnut Corporation

IncidentUnknown

ComplianceMA credit monitoring due

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov