Consumer Rights Wiki

Panera Bread

Revision as of 18:45, 2 April 2026 by SquidthePlummer (talk | contribs) (→Panera knowing of a security breach for 8 months yet did nothing: update hyperwikilink)

Founded in 1987, Pumpernickel Associates, LLC (also referred as Panera Bread) is an American chain of fast casual restaurants that's a subsidiary to JAB Holding Company.

Panera Bread
Basic information
Founded 1987
Legal Structure Subsidiary
Industry Food
Also known as Pumpernickel Associates, LLC
Official website https://www.panerabread.com/en-us/home.html

Consumer-impact summary

Overview of concerns that arise from the conduct towards users of the product (if applicable):

  • User Freedom
  • User Privacy
  • Business Model
  • Market Control

Add your text below this box. Once this section is complete, delete this box by clicking on it and pressing backspace.


Incidents

This is a list of all consumer-protection incidents this company is involved in. Any incidents not mentioned here can be found in the Panera Bread category.

Panera knowing of a security breach for 8 months yet did nothing

Main article: Panera's failure to disclose a known security breach

Back in 02 August 2017, security researcher Dylan Houlihan first notified Panera of the breach that allowed hackers to access customers personal information via its website, however the company wouldn't take any action until 8 month later on 02 April 2018.[1] This would eventually result in a lawsuit 3 days later, however eventually being dismissed by the plaintiffs on June 2018.[2]

Discriminating against blind customers

The company was involved a class action lawsuits On 20 April 2016 due to allegedly failing to provide accessibility to visually impaired customers on its product and services. Filed by Andres Gomez and Juan Gil, the lawsuits claims the company failed to implement a "blind interface systems which employs an audio interface system, a tactile keyboard, and/or interactive screen reader technology or other auxiliary aids" on its Ipad Touchscreen KIOS systems. Additionally, it also claims the companys Fast Lane pickup session failed to include signs, audio systems, or braille on the shelves for visually impaired customers.[3] The lawsuit reached a settlement in 2022. [4][5][3]

Adding hidden delivery fees

On 11 March 2021, plaintiff Mahasin Ahmad filed a lawsuit alleging the company added hidden fees to delivery orders made via the app or website. The lawsuit claims during early 2020, Panera began advertising $4 delivery fee to consumers , however, instead of maintaining its promises, the company added a hidden delivery fee that increase the price by 5-10%.[6]The lawsuit would reach a $4 million settlement on 30 January 2024. In the settlement, Panera Bread would compensate customers who ordered between 01 October 2020 and 31 August 2021 with up to two voucher for Soups & Mac menu. or a cash reward of $19.[7]

Securtiy Breach (2026)

On Late January, a hacker group known as ShinyHunters gained access to Panera Bread or one of their third parties systems by exploting Microsoft Entra SSO code, containing customers names, email addresses, phone numbers, and addresses. ShinyHunters demanded the company pay ransom to not release customers information around February, however the company refused, eventually leading to 5.4 million customers information being leaked online.[8][9][10]

 
ShinyHunter website

"We have your customer database. Pay $X in cryptocurrency within 48 hours, or we publish everything. If you pay, we delete the data and provide proof."


In a statement made by Panera Bread CEO Paul Carbone, he stated that the vulnerability was fixed and didn't include financial information nor other information of its other services.[11]

“We had independent security experts. We quickly identified the cause and strengthened controls for that third-party application.” And, importantly, the data involved did not include any payment information, employee systems, MyPanera accounts, or Unlimited Sip Club.”

Starting 29 January through February, the company would receive several lawsuits that alleges the company failure to secure consumer information by not encrypting users data. As of April 2026, the lawsuit is still pending litigation.[12][13][10]

Products

Panera Charged Lemonade

[14][15][16][17][18]

Panera Breadss Chicken Tortilla Soup recall

[19]

See also

References

  1. ↑ Shaak, Erin (6 April 2018). "Panera Bread Facing Lawsuit Over Potential Security Breach". ClassAction. Retrieved 29 March 2026.{{cite web}}: CS1 maint: url-status (link)
  2. ↑ Bucher, Anne (7 June 2018). "Panera Data Breach Class Action Voluntarily Dismissed by Plaintiffs". Top Class Action. Retrieved 30 March 2026.{{cite web}}: CS1 maint: url-status (link)
  3. ↑ 3.0 3.1 "UNITED STATES DISTRICT COURT SOUTHERN DISTRICT OF FLORIDA MIAMI DIVISION" (PDF). Wayback Machine. 29 March 2026. Retrieved 29 March 2026.{{cite web}}: CS1 maint: url-status (link)
  4. ↑ ""Panera 2.0" Ordering System Unaccommodating to Visually Impaired, Consumers Allege". Foodbeveragelitigationupdate. 29 April 2016. Retrieved 29 March 2026.{{cite web}}: CS1 maint: url-status (link)
  5. ↑ "Pouros Ltd vs Elias Stamm". Unicourt. 29 March 2026. Retrieved 29 March 2026.{{cite web}}: CS1 maint: url-status (link)
  6. ↑ Rizzi, Corrado (12 March 2021). "Panera Class Action Lawsuit Filed Over Allegedly Hidden Delivery Fees [UPDATE]". ClassAction. Retrieved 29 March 2026.{{cite web}}: CS1 maint: url-status (link)
  7. ↑ Grothaus, Michael (25 January 2024). "Panera Bread may owe you money if you placed an order online or via its app". Fast Company. Retrieved 29 March 2026.{{cite web}}: CS1 maint: url-status (link)
  8. ↑ "Panera Bread Microsoft Entra SSO Breach: ShinyHunters Leak 5.1 Million Customer Records in 2026 Data Attack". Rescana. 2 April 2026. Retrieved 2 April 2026.{{cite web}}: CS1 maint: url-status (link)
  9. ↑ Gupta, Deepak (31 March 2026). "Panera's 5.1 Million User Breach: When 'No Hack' Becomes a Ransomware Business Model". Security Boulevard. Retrieved 2 April 2026.{{cite web}}: CS1 maint: url-status (link)
  10. ↑ 10.0 10.1 Knutsson, Kurt (19 February 2026). "Panera Bread data breach exposes 5.1M customers". Fox News. Retrieved 2 April 2026.{{cite web}}: CS1 maint: url-status (link)
  11. ↑ Jennings, Lisa (23 February 2026). "Panera faces multiple lawsuits following data breach". Restaurant Buisness. Retrieved 30 March 2026.{{cite web}}: CS1 maint: url-status (link)
  12. ↑ "Panera Bread hit with two class action lawsuits over data breach". Top Class Action. 6 February 2026. Retrieved 30 March 2026.{{cite web}}: CS1 maint: url-status (link)
  13. ↑ "Cardin v. Panera Brands, Inc". Justia. 2 April 2026. Retrieved 2 April 2026.{{cite web}}: CS1 maint: url-status (link)
  14. ↑ Miller, Andy (6 October 2025). "The Only Recap Of Panera's Downfall You Need". The Takeout. Retrieved 29 March 2026.{{cite web}}: CS1 maint: url-status (link)
  15. ↑ Wendy, Hector (16 September 2025). "Customers Say These 10 Fast Food Chains Have Seriously Dipped In Quality In 2025". The Daily Meal. Retrieved 29 March 2026.{{cite web}}: CS1 maint: url-status (link)
  16. ↑ Bucher, Anne (23 March 2026). "Panera hit with third lawsuit over Charged Lemonade". Top Class Action. Retrieved 29 March 2026.{{cite web}}: CS1 maint: url-status (link)
  17. ↑ Bell, Amy (1 July 2024). "Fast Food Chains That Have Been Sued For False Advertising". Mashed. Retrieved 29 March 2026.{{cite web}}: CS1 maint: url-status (link)
  18. ↑ Styf, Jon (16 May 2024). "Panera discontinues Charged Lemonade drink involved in several lawsuits". Top Class Action. Retrieved 29 March 2026.{{cite web}}: CS1 maint: url-status (link)
  19. ↑ Spicer, Christina (11 August 2021). "Recall Check: Panera Soup With Latex Gloves, 60K Pounds of Aldi Frozen Chicken". Top Class Action. Retrieved 29 March 2026.{{cite web}}: CS1 maint: url-status (link)
Retrieved from "https://consumerrights.wiki/index.php?title=Panera_Bread&oldid=49243"