Panera data breach hits over 5 million customers — names, emails, phone numbers and physical addresses exposed

A Panera Bread store on a sunny day with a tree on the left side.

After failing to extort Panera Bread, a group of hackers has reportedly released over 14 million records stolen from the soup and sandwich chain. About 5.1 million of those records contain customer information.

The data was stolen by the ShinyHunters extortion group, according to the SecurityWeek blog. The group is believed to have compromised a Microsoft Entra single-sign-on code in order to gain access to Panera's systems. Entra is a series of network and identity products built by Microsoft to help with security and employee access.