Panera Bread Data Breach Could Affect Indiana Customers

ACROSS INDIANA -- In a move that could affect people across Indiana, a flaw on the Panera Bread website leaked information including names, email addresses, birthdays and the last four digits of payment cards for customers who had signed up to order food online, according to a report in Krebs on Security. Although Krebs was estimating more than 37 million customers could be affected, Panera's chief information officer issued a statement to Reuters saying the issue was "resolved" and that the leaks affected "fewer than 10,000 consumers."

Panera's chief information officer issued a statement to Reuters saying the issue was "resolved" and that the leaks affected "fewer than 10,000 consumers."

Panera suspended the website to repair the issue after being notified by Krebs on Security. However, as Krebs later noted, the fix Panera used still allowed people who logged into panerabread.com using a valid account to view customer information as opposed to just anyone on the web.

Eight months after the flaw was first reported to Panera, it had still not been fixed, according to Krebs.

The chain has 37 locations in Indiana, including the Indianapolis area

Panera Bread did not immediately respond to a request for comment.

• See the full report from Krebs on Security here.
• See Houlihan's exchange with Panera here.

Read more via Patch.

Photo by Juli Hansen/Shutterstock