Panera Bread

Allegations that Panera Bread failed to protect customer data in a January 2026 breach attributed to the ShinyHunters hacking group.

Two class action lawsuits were filed against Panera Bread in Missouri federal court in February 2026 after a January 2026 data breach. The complaints allege that the hacking group ShinyHunters accessed Panera's network and acquired files containing the personal information of millions of customers, including names, email addresses, home addresses, phone numbers and account details. Some reports put the number of affected customers at about 5.1 million. The plaintiffs claim Panera failed to encrypt or redact sensitive data, disregarded known cybersecurity risks and did not promptly notify affected customers, despite suffering a similar breach in March 2024 that led to a separate $2.5 million settlement. They are seeking damages and identity theft protection. No settlement has been reached and there is no claim process yet.

• Panera Bread customers in the United States whose personal information was compromised in the January 2026 data breach.
• Final class definitions will be set by the court.