DisclosureLens
HackingRetail & ConsumerRetailCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Panera Bread Company

bd_8e51ab7a2ba7264f · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 23, 2024

Filed

Oct 29, 2024

To disclose

31 weeks

Affected

Not disclosed

Linked

2 filings

Confidence

64%
Full breach record for Panera Bread Company3 incidents on file

Panera, LLC notified consumers of a security incident on March 23, 2024, involving unauthorized access to internal files containing names and potentially Social Security numbers. A cybersecurity firm was engaged, and law enforcement was notified. Panera offered one year of identity theft protection services. No indication that data was publicly available.

Vermont clock VT AG >45 bday31 weeks discovery → filing

Incident timeline

discovery → filing · 31 weeks / 220 days

Mar 23, 2024

Begins

Mar 23, 2024

Discovered

Oct 29, 2024

Filed

vs. sector median

+24 wks slower

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Filing propagation · 2 filings · 2 states

View merged incident ↗
New Hampshire State AGOct 29 · first
Vermont State AGOct 29 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.