• June 2025 •

Krispy Kreme Data Breach

Last Updated on June 19, 2025

If you received a notice that your information was compromised, you may be able to start a class action to collect money for the harm you’ve suffered.

• Keep reading for more information

At A Glance

What's Going On?: Attorneys need to hear from people affected by the Krispy Kreme data breach as they investigate whether a class action lawsuit can be filed.
What You Can Do: If you got a letter or email about the data breach, fill out the form on this page to learn more about the investigation and how you can help.
Does This Cost Anything?: It costs nothing to get in touch or to talk to someone about your rights.
What Can I Get?: If filed and successful, a class action lawsuit could provide consumers with money for any harm resulting from the breach.

Krispy Kreme Data Breach: Lawsuit Investigation

Attorneys working with ClassAction.org are looking into whether a class action lawsuit can be filed in light of the Krispy Kreme data breach.

As part of their investigation, they need to hear from individuals who received a notice stating they were impacted.

Krispy Kreme Security Incident: What Happened?

Krispy Kreme Doughnut Corporation has reported a data breach affecting 161,676 individuals, the majority of whom are current and former employees and their family members. The incident involved unauthorized access to portions of the doughnut shop operator's information technology systems and was detected on November 29, 2024. After discovering the unauthorized activity, Krispy Kreme enlisted outside cybersecurity experts to investigate and remediate the situation.

By May 22, 2025, it was determined that certain personal information had been compromised. Information involved in the Krispy Kreme Doughnut Corporation data breach includes, depending on the individual, names, Social Security numbers, dates of birth, driver’s license or state ID numbers, financial account and access details, credit or debit card information, usernames and passwords, passport numbers, digital signatures, biometric data, medical or health information, and health insurance details, among other sensitive identifiers.

Krispy Kreme is sending data breach notice letters to affected individuals.

What You Can Do After the Krispy Kreme Data Breach

If your information was exposed in the data breach, attorneys want to hear from you. You may be able to start a class action lawsuit to recover compensation for loss of privacy, time spent dealing with the breach, out-of-pocket costs, and more.

A successful case could also force Krispy Kreme to ensure it takes proper steps to protect the information it was entrusted with.

Got a notice about the Krispy Kreme data breach? Fill out the form on this page today.