Major KrispyKreme.com Data Breach Exposes User Info on Dark Web

Data Breach Summary

InsecureWeb has identified a major security breach involving KrispyKreme.com, where sensitive user data has been leaked onto the dark web in April 2025. Approximately a substantial volume of data was compromised, including emails, passwords, names, last names, ZIP codes, birth dates, and phone numbers. The leaked information was discovered on the dark web forum LeakBase.io, shared by a user under the alias “good_bases.” This incident underlines significant security vulnerabilities and highlights the urgent need for Krispy Kreme to reinforce its data protection measures.

Where and How?

The breach was uncovered during routine dark web surveillance carried out by InsecureWeb. The compromised data was being circulated on LeakBase.io, a known marketplace for stolen information. The format of the leaked data is organized as email:password combinations, along with personal details such as full names, ZIP codes, birth dates, and phone numbers. This extensive leak exposes users to heightened risks of identity theft, phishing attacks, and account takeovers. The fact that such detailed personal information is now easily accessible to cybercriminals amplifies the potential damage of this breach.

---

Company Data Breach History

Krispy Kreme previously suffered a significant cybersecurity incident in November 2024. The Play Ransomware Group (also known as PlayCrypt) executed a ransomware attack that disrupted Krispy Kreme’s online ordering operations and allegedly compromised customer personal information, payroll records, tax documents, and other sensitive internal files. The breach had a financial impact estimated at around $11 million and resulted in the suspension of online services for nearly a month. The company responded by engaging cybersecurity experts, notifying law enforcement agencies, and implementing stronger containment and remediation measures.

Given this recent history, the April 2025 leak further raises concerns about the robustness of Krispy Kreme’s cybersecurity framework and its ability to protect user data effectively.

Further Action

InsecureWeb advises Krispy Kreme to conduct a thorough investigation to determine the root cause of the breach, patch existing vulnerabilities, and enhance its security infrastructure. Transparent communication with affected users is essential to maintain trust, along with offering services such as credit monitoring and identity theft protection.

Recommendations for Personal Data Protection

How Users Can Protect Their Information
To safeguard personal information and accounts, users should consider the following steps:

• Change Passwords Regularly: Use strong, unique passwords combining letters, numbers, and symbols.
• Enable Two-Factor Authentication (2FA): Whenever possible, activate 2FA to add an extra layer of security to accounts.
• Use Unique Passwords for Each Account: Avoid reusing passwords across different platforms to prevent multiple account compromises.
• Be Cautious of Phishing Attempts: Stay vigilant against suspicious emails or messages that may contain malicious links or solicit personal information.
• Monitor Accounts for Unusual Activity: Regularly review account statements and activities to detect and respond promptly to unauthorized actions.

By adopting these practices, users can enhance their personal data security and reduce the risk of unauthorized access to their information.

What is InsecureWeb?

InsecureWeb is a Dark Web monitoring service that keeps track of recent data breaches and tracks their impact by monitoring the darkest places of the internet.

Our commitment lies in providing top-notch cybersecurity services to our clients. Through continuous monitoring of the dark web and advanced threat detection methodologies, we strive to identify potential breaches promptly, enabling swift response and mitigation efforts. With our state-of-the-art tools and expertise, we prioritize the confidentiality, integrity, and availability of our clients’ data.