Home » Money

Panera Bread's website leaked customer records for 8 months, report says

04 April, 2018, 02:17 | Author: Kristi Dunn
  • Panera Bread’s website hit by data breach

The breach was first spotted by Dylan Houlihan, a security researchers who notified Panera Bread about the customer data leak eight months ago.

The fast casual restaurant chain reportedly left data like names, birthdays, last four digits of credit cards, and email and physical addresses in plain text on its official website. And even though Panera Bread was aware of the issue since August of a year ago, "the flaw never disappeared", Houlihan said, adding that "checked on it every month or so because I was pissed". These records include email addresses, phone numbers, loyalty account numbers and home addresses.

Houlihan said he checked the site monthly and found the leak had not been fixed as late as Monday.

A security researcher says he reached out to Panera eight months ago about the leak, but that the company did nothing until Monday.

Another day, another set of customers' personal data being exposed.

Commentary of Manchester United v Swansea on Today FM
Manchester United will next take a short trip across to the Etihad next weekend to take on Manchester City in a local derby. They have more hard games to come in the run in against Manchester City at the Etihad and Chelsea at the Liberty Stadium.

"I have also submitted reports like this to companies, in bug bounties and as a courtesy with no expectation of a reward", wrote Houlihan.

After a series of emails and false accusations claiming he was a scammer or was interested in a bounty, Mike Gustavison, Panera Bread's Information Security Director, finally responded and said they were working on a resolution. It appears that its customer records are no longer reachable.

On Monday, security expert Brian Krebs reported that PaneraBread.com, the online domain for the USA bakery and cafe chain, exposed customer records including names, email addresses, physical addresses, dates of birth, loyalty card numbers, and the last four digits of credit card numbers.

Panera also said the company's investigation indicated that fewer than 10,000 consumers had been potentially affected.

In a statement to Reuters, Panera Bread Chief Information Officer John Meister said that there was no evidence of payment card information being accessed.

Recommended:

  • There's one big reason Trump wouldn't want to go after Amazon

    Senior fellow at the Institute on Taxation and Economic Policy, Matthew Gardner, explained this in a February blog post . On Monday Trump had also attacked the company over its shipping after criticizing it last week over taxes.
    Kpop group Red Velvet perform for Kim Jong Un in Pyongyang

    Kpop group Red Velvet perform for Kim Jong Un in Pyongyang

    I had initially planned to attend a performance the day after tomorrow but I came here today after adjusting my schedule. How North Koreans would react to Red Velvet was particularly the focus of keen media attention in South Korea.
    Kamal Haasan meets Christopher Nolan

    Kamal Haasan meets Christopher Nolan

    He shot his documentary of archivist PK Nair, Celluloid Man (2012) on different film formats that he could find. Nolan is being accompanied by his wife Emma Thomas and acclaimed visual artist Tacita Dean.
  • 'Definitely' no chance of Parker v Joshua rematch, says promoter

    'Definitely' no chance of Parker v Joshua rematch, says promoter

    British-Nigerian Joshua, 28, has now gone 21 fights without defeat while it was Parker's first professional loss after 25 fights. Although those backing Joshua outnumbered Parker's support, he received a healthy portion of cheers from the crowd.
    US And South Korea Begin Joint Military Exercise

    US And South Korea Begin Joint Military Exercise

    South Korean and the United States began their delayed joint military training on Sunday, mobilizing more than 300,000 troops. Military officials in Seoul have said the scale of the exercises would not go beyond those seen in previous years.
    Dead After Hotel Collapses in India

    Dead After Hotel Collapses in India

    The Collector of Indore Nishant Warwade has told NDTV that two to five people may still be trapped under the rubble . At least 10 people have been killed Saturday after a four-story building collapsed in Indore's Sarvate Bus Stand.
  • SpaceX Sends Nearly Three Tons of Cargo to Space Station

    SpaceX Sends Nearly Three Tons of Cargo to Space Station

    Eastern Daylight Time on Monday, April 2, 2018, from Space Launch Complex 40 at the Cape Canaveral Air Force Station in Florida. On April 2, SpaceX successfully launched the Falcon 9 rocket which then deployed the SpaceX Dragon resupply capsule into orbit.
    Lagos Govt closes roads for Buhari's visit, Thursday

    Lagos Govt closes roads for Buhari's visit, Thursday

    Oluwatoyin Suarau, stated that Lake Rice would be sold in all designated centres from Thursday (today). Roads will be closed for him to make a pass through and will be opened after he passes.
    Turkey won't negotiate with terrorists in Syria - presidential spokesperson

    Turkey won't negotiate with terrorists in Syria - presidential spokesperson

    Turkey has warned France over bolstering its military presence in Syria, stressing that such a move would amount to an invasion. Erdogan spoke last week with Macron about the French president's criticism of Turkey's Afrin campaign.
  • Pinwheels raise awareness of Child Abuse Prevention Awareness Month

    Pinwheels raise awareness of Child Abuse Prevention Awareness Month

    If your business or organization is interested in hosting a pinwheel garden during April, just call Sara McBroom at 318-398-0945. We want to share some information about the Children's Advocacy Center of McKean County.
    Antonio Conte can't escape blame for Chelsea woes, he's not changed enough

    Antonio Conte can't escape blame for Chelsea woes, he's not changed enough

    But Conte wouldn't concede Chelsea are out of the race for the top four. "Then the club has to take the decision. About the transfers, I believe that the manager should be firm about his requirements.
    Notre Dame beats UConn, will face Mississippi State in NCAA Women's Championship

    Notre Dame beats UConn, will face Mississippi State in NCAA Women's Championship

    The Lady Bulldogs are among the favorites now, and they want the opportunity to play Notre Dame or rematch UConn in the finals. Louisville defeated Notre Dame , who also made the women's Final Four, 74-72, in the ACC Tournament championship on March 4.


Popular

Villanova hero deletes Twitter account over offensive posts
The statement was later pulled back because the age of the tweets contradicted the school's version of the events. Just as in previous contests this month, Villanova looked vulnerable in the first half Monday night.

Mississippi State women's basketball receives warm welcome home
Louis in 2001 - and 2001 MVP Ruth Riley was on hand with maybe 20 other former Irish players to join the celebration. President Bartel, a Notre Dame alum herself, said Ogunbowale exudes the qualities instilled in DSHA students.

Italy March manufacturing PMI 55.1 vs 55.4 expected
The higher PMI reading was attributed to a faster expansion in factory output, inventory, new orders and new exports. An index reading of above 50 indicates an overall increase in economic activity and below 50 an overall decrease.

Judge rejects trial demand in Stormy Daniels case
Actor Seth Rogen knew about the alleged affair between porn star Stormy Daniels and Donald Trump long before anyone else did. She had the affair in 2006 after meeting Trump at a golf event in Lake Tahoe, Calif.

If you have an iOS device, you can now play Fortnite
The contest lasts until April 10, so if you plan on dancing for the internet to see, get your entries in by then. Support for Android devices is in the works and should be available "within the next few months".

We've Got OnePlus 6 Pricing Details & Its Case
For photography, the smartphone will come equipped with a dual rear camera setup with a combination of a 12MP and 20MP sensors. OnePlus co-founder and CEO Carl Pei exclusively told The Verge last week that the next OnePlus smartphone will have a notch .

Video trend the 'condom challenge' makes online resurgence
As Kens5 puts it, "There is a fine line between bravery and stupidity, but the line isn't so fine when people snort condoms ". PARENTS are being urged to be vigilant over a risky new social media challenge of teens snorting condoms up their noses.

Netanyahu praises Israeli troops after Gaza border clashes
On Saturday, during a speech in Istanbul, Erdogan said: "I strongly condemn the Israeli government over its inhumane attack. Referring to April Fool's Day, he added: "Apparently this is how they mark April 1 in Ankara".

Korea's Kim Jong Un, wife watch K-pop stars perform in Pyongyang
A 70-member technical crew flew into the North on Thursday to prepare the stages ahead of the two concerts in Pyongyang. The North Korean leader reportedly told the artists that the two Koreas should hold cultural performances more often.

Here Are The Opening Day Collections Of Tiger Shroff's All Bollywood Films
However, " Baaghi 2 " numbers were much higher as " Padmaavat " release was affected due to protests against the film. A Flying Jatt: The Remo D'Souza directorial earned mixed reviews from the critics and was a flop at the box office.