Krispy Kreme Data Breach Lawsuit Investigation
Did you get a letter from Krispy Kreme saying your personal data was hacked? Over 162,000 customers and employees just learned their most sensitive information was stolen.
See if You Can File a ClaimQuick Facts
- Breach discovered: November 29, 2024
- SEC disclosure: December 11, 2024
- Breach confirmed: May 22, 2025
- Individuals affected: 162,676+
- Free services offered: 12-month Kroll identity monitoring
What Happened?
A cyber-attack crippled Krispy Kreme’s online ordering platform for nearly a month. Forensic investigators later confirmed that hackers accessed internal systems and extracted highly sensitive personal data belonging to customers and current or former employees.
What Data Was Exposed?
The compromise goes far beyond names and emails. According to state and federal filings, the attackers may have stolen:
- Social Security numbers
- Dates of birth & addresses
- Driver’s license or state ID numbers
- Financial account and card details (with security codes)
- Usernames, passwords & digital signatures
- Passport numbers, USCIS / military IDs
- Biometric, medical & health insurance information
With this mix of data, criminals can open loans, file false tax returns, or commit medical and insurance fraud in your name.
Who Is Affected?
The breach impacted residents nationwide, with notable numbers in:
- South Carolina – 7,266 people
- Texas – 6,948 people
- Massachusetts – 179 people
- Maine – 21 people
If you received a written notice—or previously ordered from Krispy Kreme—you should assume your data could be at risk.
Immediate Steps to Protect Yourself
- Enroll in Kroll monitoring: Follow the instructions in your notice letter.
- Place a fraud alert or credit freeze with Equifax, Experian, or TransUnion.
- Review financial and medical statements for unfamiliar activity.
- Change reused passwords and enable multi-factor authentication wherever possible.
Can You File a Data Breach Lawsuit?
U.S. privacy laws allow victims to pursue monetary damages when a company fails to safeguard personal information. Potential compensation may include:
- Reimbursement for fraud losses or out-of-pocket expenses
- Credit-monitoring and identity-theft services beyond the 12-month offer
- Time spent addressing the breach (at your hourly wage)
- Emotional distress or loss of privacy
This investigation is in early stages, and deadlines to join any case can arrive quickly. Complete the short evaluation below to protect your rights.
File Your Claim NowDownload the Official Notice
Download Official Breach Notice (PDF)Frequently Asked Questions
What did Krispy Kreme say in its breach notice?
The company confirmed unauthorized access to systems and offered one-year free Kroll identity monitoring to impacted individuals.
Is the Krispy Kreme data breach lawsuit a class action?
Investigations typically begin as individual claims and may later be consolidated into a class action if the court approves.
How long do I have to join a Krispy Kreme data breach lawsuit?
Every state has its own statute of limitations. Act promptly—once a settlement or class certification is in place, late claims may be barred.
Will signing up cost me anything?
Most data-breach attorneys work on contingency. You pay nothing unless they recover compensation for you.
Does accepting free credit monitoring waive my rights?
No. Enrolling in identity-theft services does not stop you from pursuing legal claims.
Next Steps
Don’t wait until fraud shows up on your credit report. Secure your identity and legal rights now.
Start Your Free Claim ReviewAttorney Advertising. Prior results do not guarantee a similar outcome.