US bakery chain Panera Bread data dumped after failed extortion, about 5.1 million accounts affected

According to CyberInsider, Panera Bread suffered a breach in January 2026 exposing 14 million customer records containing 5.1 million unique emails plus names, phone numbers and addresses ^[1]. According to BleepingComputer, ShinyHunters claimed access via a Microsoft Entra SSO code and leaked the data after extortion failed; according to CyberInsider, Panera confirmed only contact information was involved and notified authorities ^[2][1]. CyberInsider advises Panera members to be on high alert for phishing and social engineering, enable multi-factor authentication and monitor accounts for suspicious activity ^[1].

Industries mainly affected: Hospitality & food service

1. Be on high alert for phishing and social engineering ^[1].
2. Enable MFA and monitor your accounts for suspicious activity ^[1].