Krispy Kreme to Pay $1.6M Over Data Breach
Krispy Kreme has agreed to pay $1.6 million to settle a class-action lawsuit following a November 2024 cyberattack that exposed the personal data of approximately 161,000 current and former employees. Affected individuals must file claims by June 22, 2025. The breach compromised sensitive information including names, Social Security numbers, and financial details. The settlement fund will cover compensation for documented losses, credit monitoring services, and legal fees. This incident highlights ongoing cybersecurity vulnerabilities in the food service industry.
Key facts
- Krispy Kreme paying $1.6 million settlement
- Data breach occurred in November 2024
- 161,000 current and former employees affected
- Claims must be filed by June 22, 2025
- Exposed data includes names, Social Security numbers, financial details
- Settlement covers compensation, credit monitoring, legal fees
- Class-action lawsuit filed over the breach
- Incident underscores cybersecurity risks in food service
Entities
Institutions
- Krispy Kreme
Sources
- Quartz —