Panera Bread: Difference between revisions

(3 intermediate revisions by one other user not shown)

Line 17:

===Panera knowing of a security breach for 8 months yet did nothing===

Back in 02 August 2017, security researcher Dylan Houlihan first notified Panera of the breach that allowed hackers to access customers personal information via its website, however the company wouldn't take any action until 8 month later on 02 April 2018.<ref>{{Cite web |last=Shaak |first=Erin |date=6 April 2018 |title=Panera Bread Facing Lawsuit Over Potential Security Breach |url=https://www.classaction.org/blog/panera-bread-facing-lawsuit-over-potential-security-breach |url-status=live |access-date=29 March 2026 |website=ClassAction}}</ref> This would eventually result in a lawsuit 3 days later, however ~~eventually being~~ dismissed by the plaintiffs on June 2018.<ref>{{Cite web |last=Bucher |first=Anne |date=7 June 2018 |title=Panera Data Breach Class Action Voluntarily Dismissed by Plaintiffs |url=https://topclassactions.com/lawsuit-settlements/lawsuit-news/panera-data-breach-class-action-voluntarily-dismissed-plaintiffs/ |url-status=live |access-date=30 March 2026 |website=Top Class Action}}</ref>

Back in 02 August 2017, security researcher Dylan Houlihan first notified Panera of the breach that allowed hackers to access customers personal information via its website, however the company wouldn't take any action until 8 month later on 02 April 2018.<ref>{{Cite web |last=Shaak |first=Erin |date=6 April 2018 |title=Panera Bread Facing Lawsuit Over Potential Security Breach |url=https://www.classaction.org/blog/panera-bread-facing-lawsuit-over-potential-security-breach |url-status=live |access-date=29 March 2026 |website=ClassAction}}</ref> This would eventually result in a lawsuit 3 days later, however it was dismissed by the plaintiffs on June 2018.<ref>{{Cite web |last=Bucher |first=Anne |date=7 June 2018 |title=Panera Data Breach Class Action Voluntarily Dismissed by Plaintiffs |url=https://topclassactions.com/lawsuit-settlements/lawsuit-news/panera-data-breach-class-action-voluntarily-dismissed-plaintiffs/ |url-status=live |access-date=30 March 2026 |website=Top Class Action}}</ref>

===Discriminating against blind customers===

The company was involved a class action lawsuits On 20 April 2016 due to allegedly failing to provide accessibility to visually impaired customers on its product and services. Filed by Andres Gomez and Juan Gil, the lawsuits claims the company failed to implement a "blind interface systems which employs an audio interface system, a tactile keyboard, and/or interactive screen reader technology or other auxiliary aids" on its Ipad Touchscreen KIOS systems. Additionally, it also claims the companys Fast Lane pickup session failed to include signs, audio systems, or braille on the shelves for visually impaired customers.<ref name=":0" /> The lawsuit reached a settlement in 2022. <ref>{{Cite web |date=29 April 2016 |title=“Panera 2.0” Ordering System Unaccommodating to Visually Impaired, Consumers Allege |url=https://foodbeveragelitigationupdate.com/panera-2-0-ordering-system-unaccommodating-to-visually-impaired-consumers-allege/ |url-status=live |access-date=29 March 2026 |website=Foodbeveragelitigationupdate}}</ref><ref>{{Cite web |date=29 March 2026 |title=Pouros Ltd vs Elias Stamm |url=https://unicourt.com/case/pc-db5-gonzalez-v-panera-llc-et-al-1025832 |url-status=live |access-date=29 March 2026 |website=Unicourt}}</ref><ref name=":0">{{Cite web |date=29 March 2026 |title=UNITED STATES DISTRICT COURT SOUTHERN DISTRICT OF FLORIDA MIAMI DIVISION |url=https://dn710900.ca.archive.org/0/items/gov.uscourts.flsd.482785/gov.uscourts.flsd.482785.1.0.pdf |url-status=live |access-date=29 March 2026 |website=Wayback Machine}}</ref>

Line 24:

===Securtiy Breach (2026)===

~~On Late~~ January, a hacker group known as ShinyHunters gained access to Panera Bread or one of their third parties systems by exploiting '''[[Microsoft]]''' Entra SSO code, containing customers names, email addresses, phone numbers, and addresses. ShinyHunters demanded the company pay ransom to not release customers information around February, however the company refused, eventually leading to 5.4 million customers information being leaked online via their website.<ref>{{Cite web |date=2 April 2026 |title=Panera Bread Microsoft Entra SSO Breach: ShinyHunters Leak 5.1 Million Customer Records in 2026 Data Attack |url=https://www.rescana.com/post/panera-bread-microsoft-entra-sso-breach-shinyhunters-leak-5-1-million-customer-records-in-2026-data |url-status=live |access-date=2 April 2026 |website=Rescana}}</ref><ref>{{Cite web |last=Gupta |first=Deepak |date=31 March 2026 |title=Panera’s 5.1 Million User Breach: When ‘No Hack’ Becomes a Ransomware Business Model |url=https://securityboulevard.com/2026/03/paneras-5-1-million-user-breach-when-no-hack-becomes-a-ransomware-business-model/ |url-status=live |access-date=2 April 2026 |website=Security Boulevard}}</ref><ref name=":1">{{Cite web |last=Knutsson |first=Kurt |date=19 February 2026 |title=Panera Bread data breach exposes 5.1M customers |url=https://www.foxnews.com/tech/panera-bread-data-breach-exposes-5-1-million-customers |url-status=live |access-date=2 April 2026 |website=Fox News}}</ref>

In late January, a hacker group known as ShinyHunters gained access to Panera Bread or one of their third parties systems by exploiting '''[[Microsoft]]''' Entra SSO code, containing customers names, email addresses, phone numbers, and addresses. ShinyHunters demanded the company pay ransom to not release customers information around February, however the company refused, eventually leading to 5.4 million customers information being leaked online via their website.<ref>{{Cite web |date=2 April 2026 |title=Panera Bread Microsoft Entra SSO Breach: ShinyHunters Leak 5.1 Million Customer Records in 2026 Data Attack |url=https://www.rescana.com/post/panera-bread-microsoft-entra-sso-breach-shinyhunters-leak-5-1-million-customer-records-in-2026-data |url-status=live |access-date=2 April 2026 |website=Rescana}}</ref><ref>{{Cite web |last=Gupta |first=Deepak |date=31 March 2026 |title=Panera’s 5.1 Million User Breach: When ‘No Hack’ Becomes a Ransomware Business Model |url=https://securityboulevard.com/2026/03/paneras-5-1-million-user-breach-when-no-hack-becomes-a-ransomware-business-model/ |url-status=live |access-date=2 April 2026 |website=Security Boulevard}}</ref><ref name=":1">{{Cite web |last=Knutsson |first=Kurt |date=19 February 2026 |title=Panera Bread data breach exposes 5.1M customers |url=https://www.foxnews.com/tech/panera-bread-data-breach-exposes-5-1-million-customers |url-status=live |access-date=2 April 2026 |website=Fox News}}</ref>

[[File:ShinyHunters website Panera Bread data leak showcase.jpg|thumb|ShinyHunter website]]

<blockquote>''"We have your customer database. Pay $X in cryptocurrency within 48 hours, or we publish everything. If you pay, we delete the data and provide proof."''</blockquote>

Line 33:

===Panera Charged Lemonade===

In 2022, Panera Bread would introduce Charged lemonade. It was a product containing high levels of caffeine that comes in various flavors such as Mango Yuzu Citrus, strawberry lemon mint, and blood orange.<ref>{{Cite web |date=2 April 2026 |title=Beverages |url=https://www.panerabread.com/en-us/menu/categories/beverages.html |url-status=dead |archive-url=https://web.archive.org/web/20220816085452/https://www.panerabread.com/en-us/menu/categories/beverages.html |archive-date=16 August 2022 |access-date=2 April 2026 |website=Panera Bread}}</ref> The product would be silently discontinued after several lawsuits and injuries from customers on 07 May 2024.<ref>{{Cite web |last=Miller |first=Andy |date=6 October 2025 |title=The Only Recap Of Panera's Downfall You Need |url=https://www.thetakeout.com/1986028/panera-downfall-recap/ |url-status=live |access-date=29 March 2026 |website=The Takeout}}</ref>

In 2022, Panera Bread would introduce Charged lemonade. It was a product containing high levels of caffeine that comes in various flavors such as Mango Yuzu Citrus, strawberry lemon mint, and blood orange.<ref>{{Cite web |date=2 April 2026 |title=Beverages |url=https://www.panerabread.com/en-us/menu/categories/beverages.html |url-status=dead |archive-url=https://web.archive.org/web/20220816085452/https://www.panerabread.com/en-us/menu/categories/beverages.html |archive-date=16 August 2022 |access-date=2 April 2026 |website=Panera Bread}}</ref> The product would be silently discontinued after several lawsuits and injuries reports from customers on 07 May 2024.<ref>{{Cite web |last=Miller |first=Andy |date=6 October 2025 |title=The Only Recap Of Panera's Downfall You Need |url=https://www.thetakeout.com/1986028/panera-downfall-recap/ |url-status=live |access-date=29 March 2026 |website=The Takeout}}</ref>

====2022====

Line 54:

*[[McAlister's Deli]]

*[[~~wikipedia:Cava_Group|~~Cava ~~Group~~]]

*[[Cava Grill]]

*El Pollo Loco

@@ Line 17: / Line 17: @@
 ===Panera knowing of a security breach for 8 months yet did nothing===
 {{Main|Panera's failure to disclose a known security breach}}
-Back in 02 August 2017, security researcher Dylan Houlihan first notified Panera of the breach that allowed hackers to access customers personal information via its website, however the company wouldn't take any action until 8 month later on 02 April 2018.<ref>{{Cite web |last=Shaak |first=Erin |date=6 April 2018 |title=Panera Bread Facing Lawsuit Over Potential Security Breach |url=https://www.classaction.org/blog/panera-bread-facing-lawsuit-over-potential-security-breach |url-status=live |access-date=29 March 2026 |website=ClassAction}}</ref> This would eventually result in a lawsuit 3 days later, however eventually being dismissed by the plaintiffs on June 2018.<ref>{{Cite web |last=Bucher |first=Anne |date=7 June 2018 |title=Panera Data Breach Class Action Voluntarily Dismissed by Plaintiffs |url=https://topclassactions.com/lawsuit-settlements/lawsuit-news/panera-data-breach-class-action-voluntarily-dismissed-plaintiffs/ |url-status=live |access-date=30 March 2026 |website=Top Class Action}}</ref>
+Back in 02 August 2017, security researcher Dylan Houlihan first notified Panera of the breach that allowed hackers to access customers personal information via its website, however the company wouldn't take any action until 8 month later on 02 April 2018.<ref>{{Cite web |last=Shaak |first=Erin |date=6 April 2018 |title=Panera Bread Facing Lawsuit Over Potential Security Breach |url=https://www.classaction.org/blog/panera-bread-facing-lawsuit-over-potential-security-breach |url-status=live |access-date=29 March 2026 |website=ClassAction}}</ref> This would eventually result in a lawsuit 3 days later, however it was dismissed by the plaintiffs on June 2018.<ref>{{Cite web |last=Bucher |first=Anne |date=7 June 2018 |title=Panera Data Breach Class Action Voluntarily Dismissed by Plaintiffs |url=https://topclassactions.com/lawsuit-settlements/lawsuit-news/panera-data-breach-class-action-voluntarily-dismissed-plaintiffs/ |url-status=live |access-date=30 March 2026 |website=Top Class Action}}</ref>
 ===Discriminating against blind customers<!-- Don't know if settlement case is related to this lawsuit as I can't find any information about it   -->===
 The company was involved  a class action lawsuits On 20 April 2016 due to allegedly failing to provide accessibility to visually impaired customers on its product and services. Filed by Andres Gomez and Juan Gil, the lawsuits claims the company failed to implement a "blind interface systems which employs an audio interface system, a tactile keyboard, and/or interactive screen reader technology or other auxiliary aids" on its Ipad Touchscreen KIOS systems. Additionally, it also claims the companys Fast Lane pickup session failed to include signs, audio systems, or braille on the shelves for visually impaired customers.<ref name=":0" /> The lawsuit reached a settlement in 2022. <ref>{{Cite web |date=29 April 2016 |title=“Panera 2.0” Ordering System Unaccommodating to Visually Impaired, Consumers Allege |url=https://foodbeveragelitigationupdate.com/panera-2-0-ordering-system-unaccommodating-to-visually-impaired-consumers-allege/ |url-status=live |access-date=29 March 2026 |website=Foodbeveragelitigationupdate}}</ref><ref>{{Cite web |date=29 March 2026 |title=Pouros Ltd vs Elias Stamm |url=https://unicourt.com/case/pc-db5-gonzalez-v-panera-llc-et-al-1025832 |url-status=live |access-date=29 March 2026 |website=Unicourt}}</ref><ref name=":0">{{Cite web |date=29 March 2026 |title=UNITED STATES DISTRICT COURT SOUTHERN DISTRICT OF FLORIDA MIAMI DIVISION |url=https://dn710900.ca.archive.org/0/items/gov.uscourts.flsd.482785/gov.uscourts.flsd.482785.1.0.pdf |url-status=live |access-date=29 March 2026 |website=Wayback Machine}}</ref>
@@ Line 24: / Line 24: @@
 ===Securtiy Breach (2026)===
-On Late January, a hacker group known as ShinyHunters gained access to Panera Bread or one of their third parties systems by exploiting '''[[Microsoft]]''' Entra SSO code, containing customers names, email addresses, phone numbers, and addresses. ShinyHunters demanded the company pay ransom to not release customers information around February, however the company refused, eventually leading to 5.4 million customers information being leaked online via their website.<ref>{{Cite web |date=2 April 2026 |title=Panera Bread Microsoft Entra SSO Breach: ShinyHunters Leak 5.1 Million Customer Records in 2026 Data Attack |url=https://www.rescana.com/post/panera-bread-microsoft-entra-sso-breach-shinyhunters-leak-5-1-million-customer-records-in-2026-data |url-status=live |access-date=2 April 2026 |website=Rescana}}</ref><ref>{{Cite web |last=Gupta |first=Deepak |date=31 March 2026 |title=Panera’s 5.1 Million User Breach: When ‘No Hack’ Becomes a Ransomware Business Model |url=https://securityboulevard.com/2026/03/paneras-5-1-million-user-breach-when-no-hack-becomes-a-ransomware-business-model/ |url-status=live |access-date=2 April 2026 |website=Security Boulevard}}</ref><ref name=":1">{{Cite web |last=Knutsson |first=Kurt |date=19 February 2026 |title=Panera Bread data breach exposes 5.1M customers |url=https://www.foxnews.com/tech/panera-bread-data-breach-exposes-5-1-million-customers |url-status=live |access-date=2 April 2026 |website=Fox News}}</ref>
+In late January, a hacker group known as ShinyHunters gained access to Panera Bread or one of their third parties systems by exploiting '''[[Microsoft]]''' Entra SSO code, containing customers names, email addresses, phone numbers, and addresses. ShinyHunters demanded the company pay ransom to not release customers information around February, however the company refused, eventually leading to 5.4 million customers information being leaked online via their website.<ref>{{Cite web |date=2 April 2026 |title=Panera Bread Microsoft Entra SSO Breach: ShinyHunters Leak 5.1 Million Customer Records in 2026 Data Attack |url=https://www.rescana.com/post/panera-bread-microsoft-entra-sso-breach-shinyhunters-leak-5-1-million-customer-records-in-2026-data |url-status=live |access-date=2 April 2026 |website=Rescana}}</ref><ref>{{Cite web |last=Gupta |first=Deepak |date=31 March 2026 |title=Panera’s 5.1 Million User Breach: When ‘No Hack’ Becomes a Ransomware Business Model |url=https://securityboulevard.com/2026/03/paneras-5-1-million-user-breach-when-no-hack-becomes-a-ransomware-business-model/ |url-status=live |access-date=2 April 2026 |website=Security Boulevard}}</ref><ref name=":1">{{Cite web |last=Knutsson |first=Kurt |date=19 February 2026 |title=Panera Bread data breach exposes 5.1M customers |url=https://www.foxnews.com/tech/panera-bread-data-breach-exposes-5-1-million-customers |url-status=live |access-date=2 April 2026 |website=Fox News}}</ref>
 [[File:ShinyHunters website Panera Bread data leak showcase.jpg|thumb|ShinyHunter website]]
 <blockquote>''"We have your customer database. Pay $X in cryptocurrency within 48 hours, or we publish everything. If you pay, we delete the data and provide proof."''</blockquote>
@@ Line 33: / Line 33: @@
 ===Panera Charged Lemonade===
-In 2022, Panera Bread would introduce Charged lemonade. It was a product containing high levels of caffeine that comes in various flavors such as Mango Yuzu Citrus, strawberry lemon mint, and blood orange.<ref>{{Cite web |date=2 April 2026 |title=Beverages |url=https://www.panerabread.com/en-us/menu/categories/beverages.html |url-status=dead |archive-url=https://web.archive.org/web/20220816085452/https://www.panerabread.com/en-us/menu/categories/beverages.html |archive-date=16 August 2022 |access-date=2 April 2026 |website=Panera Bread}}</ref> The product would be silently discontinued after several lawsuits and injuries from customers on 07 May 2024.<ref>{{Cite web |last=Miller |first=Andy |date=6 October 2025 |title=The Only Recap Of Panera's Downfall You Need |url=https://www.thetakeout.com/1986028/panera-downfall-recap/ |url-status=live |access-date=29 March 2026 |website=The Takeout}}</ref>
+In 2022, Panera Bread would introduce Charged lemonade. It was a product containing high levels of caffeine that comes in various flavors such as Mango Yuzu Citrus, strawberry lemon mint, and blood orange.<ref>{{Cite web |date=2 April 2026 |title=Beverages |url=https://www.panerabread.com/en-us/menu/categories/beverages.html |url-status=dead |archive-url=https://web.archive.org/web/20220816085452/https://www.panerabread.com/en-us/menu/categories/beverages.html |archive-date=16 August 2022 |access-date=2 April 2026 |website=Panera Bread}}</ref> The product would be silently discontinued after several lawsuits and injuries reports from customers on 07 May 2024.<ref>{{Cite web |last=Miller |first=Andy |date=6 October 2025 |title=The Only Recap Of Panera's Downfall You Need |url=https://www.thetakeout.com/1986028/panera-downfall-recap/ |url-status=live |access-date=29 March 2026 |website=The Takeout}}</ref>
 ====2022====
@@ Line 54: / Line 54: @@
 *[[McAlister's Deli]]
-*[[wikipedia:Cava_Group|Cava Group]]
+*[[Cava Grill]]
 *El Pollo Loco