Panera Bread's website exposed customer data for months, report says

Panera Bread Leaks Millions of Customer Records

Restaurant chain Panera Bread was found by security researchers to be leaking customer information, according to a report released on April 2. The company said the records, which were available for about eight months online, contained names, email and physical addresses, birthdays and the last four digits of customers credit card numbers.

"The flaw never disappeared", Houlihan told KresbsOnSecurity.

The leaked customer information could be indexed and crawled by automated tools, and easily scraped through Panera's sequential customer ID numbering system. To make matters worse, the company apparently took no action 8 months after it was informed. Past year the credit agency Equifax, meanwhile, revealed that hackers had stolen some of its customers' personal data, affecting almost 140 million people in total. Panera Bread, however, has downplayed the severity of the data leak, telling Fox News "only 10,000 customer records were exposed". It wasn't until Krebs on Security published the incident that Panera actually took down the site for maintenance. It's not clear whether anyone actually accessed any of the data, which was supplied by customers who had made accounts for food delivery and other services.

Following the blog post, Panera denied the estimation from Krebs that millions of customer records might be at risk.

The links provided by Krebs now result in error messages.

Roseanne Barr Laughs At Donald Trump Taking Credit For Roseanne's Ratings
Television executives are paying extra-close attention to Tuesday night's ratings race. The remaining 28 percent of voters are on a wait-and-see track with the show.

Teachers in Oklahoma and Kentucky stage protests
But if legislative leaders wait until after Monday, they would not have time to override any potential vetoes from the governor. Arizona Educators United, a grassroots group similar to Oklahoma Teachers United, has taken the helm in that state.

'Affluenza Teen' released from jail after serving 2 years
Shortly after that, a beer pong video surfaced, appearing to show Couch violating his probation by being at a party with alcohol. Couch was convicted in the crash after driving a pickup truck into a group of good Samaritans helping a stranded driver.

Krebs said his own testing "seems to indicate the issues I raised are no longer issues".

"The vulnerabilities also appear to have extended to Panera's commercial division, which serves countless catering companies".

Reuters is reporting that Panera Bread is saying that the issue has been resolved.

He said he contacted Mike Gustavison, Panera's director of information security.

"We are working diligently to finalize our investigation and take the appropriate next steps", he said. Accern ranks coverage of publicly-traded companies on a scale of negative one to positive one, with scores closest to one being the most favorable.

Related News:

  • As Spotify begins trading, a mixed bag for recent tech IPOs

    As Spotify begins trading, a mixed bag for recent tech IPOs

    A huge number of shares hitting the market all at once could sink the stock price. "This won't be replicated often", Kennedy says. Spotify, which was founded a decade ago, is the world's largest music streaming service and has more than 71 million subscribers.
    Google shuts down Google URL Shortener goo.gl

    Google shuts down Google URL Shortener goo.gl

    While most features of goo.gl will eventually sunset, all existing links will continue to redirect to the intended destination. The company is planning to ditch the goo.gl (link shortening tool) with its new Firebase Dynamic Links (FDL ) tool.
    LeBron James Ties Michael Jordan's Double-Digit Scoring Streak

    LeBron James Ties Michael Jordan's Double-Digit Scoring Streak

    The Lakers were 103-93 winners against the Mavericks as Brook Lopez scored 22 points and Julius Randle added 20 with 10 rebounds. Just three weeks later, for example, Nike founder Phil Knight flew to watch James in person to amp up the recruiting.
  • Ivory sales ban launched in United Kingdom  by Environment Secretary Michael Gove

    Ivory sales ban launched in United Kingdom by Environment Secretary Michael Gove

    Defra said the ban would build on existing Government work to tackle poaching and the illegal ivory trade. Britain said the worldwide illegal wildlife trade is estimated to be worth up to €19.5bn.
    Bruce: Be weather aware, severe storms possible

    Bruce: Be weather aware, severe storms possible

    By midday, showers and thunderstorms will begin to move into far northwest Georgia clouds begin to drift over the metro area. Heavy rain has been falling in Arkansas and MS for over 24 hours, but only clouds have impacted north Alabama.
    International Olympic Committee  chief Bach: DPRK will take part in next two Olympics

    International Olympic Committee chief Bach: DPRK will take part in next two Olympics

    Critics viewed the move as a propaganda tool created to divert attention from the growing threat of his nuclear weapons program. North Korean leader Kim Jong Un is seen writing, in this still image taken from video released on Wednesday.
  • Grindr exposed its users' HIV statuses to two other companies

    Grindr exposed its users' HIV statuses to two other companies

    Users who include their HIV status in their Grindr profile may not have control of who sees their diagnosis outside the platform. Grindr wasn't just sharing highly sensitive information with other companies, but it was also doing it via unencrypted channels.
    Marvel's Spider-Man (Playstation 4)

    Marvel's Spider-Man (Playstation 4)

    You can get a Digital Deluxe edition on the PSN store which will include some digital goodies like suits, missions, and more. Because of this, we recommend waiting until the full statue is revealed before purchasing the Collector's Edition.
    France Rules Out Military Intervention in Northern Syria

    France Rules Out Military Intervention in Northern Syria

    On Thursday the presidency said Macron was offering to mediate between Turkey and the SDF - a suggestion which Erdogan dismissed. The head of the Fifth Republic does intend to "immediately" send units of special forces of the French army to Manbij.
  • News Anchor At Sinclair-Owned Station Hits Back At Trump

    News Anchor At Sinclair-Owned Station Hits Back At Trump

    Sinclair has "used its 173 television stations to advance a mostly right-leaning agenda since the presidency of George W. The executive said the promo was "focused on fact-based reporting" and were a "well-researched journalistic initiative".
    Russia Kemerovo fire: Aman Tuleyev quits as governor

    Russia Kemerovo fire: Aman Tuleyev quits as governor

    On Sunday he appointed Sergei Tsivilyov, one of the region's deputy governors, to replace Tuleyev as acting governor. Speaking about his resignation, Tuleyev said that he believes it is the only right decision.
    Seoul Welcomes Kim Jong-un's China Visit

    Seoul Welcomes Kim Jong-un's China Visit

    Japan's Asahi newspaper reported that Japan had sounded out the North Korean Government about a bilateral summit. North Korea has yet to officially confirm its interest in a summit between Kim and President Donald Trump.


Most liked

Marjory Stoneman Douglas Students Now Have To Carry Clear Backpacks
On Monday, many students entered the campus carrying plastic grocery bags containing their books and other belongings. Security eventually arrived after Pittman called Anna Fusco, president of the Broward Teachers Union, and Gov.

Manafort Appears in Court in Bid to Drop Mueller's Charges Against Him
Mueller was appointed in May to examine whether Trump associates participated in a Russian effort to swing the election. The argument came at a hearing this morning in the civil analogue to Manafort's criminal prosecution.

First person sentenced in Russia probe gets 30 days
Yanukovych had imprisoned Tymoshenko, a political rival, after a gas supply controversy in 2009 involving Russian Federation . Van der Zwaan is a London-based lawyer who formerly worked at worldwide law firm Skadden, Arps, Slate, Meagher & Flom.

Vermont to oppose EPA fuel economy rollback
And his daughter stayed in the townhouse, as well, when she was a White House intern, further reporting by ABC News revealed . Trump is said to be fond of Pruitt and has cheered his moves to rollback regulations and do battle with environmental groups.

UFC 223 Embedded 1: Holloway vs Nurmagomedov Vlog Series
The good news is that Max "Blessed" Holloway agreed to step up for the challenge on just six day's notice. This is the fourth time it has been scheduled, I have a frightful feeling it's not going to happen.

Possible sighting of Jennifer Hart before deadly cliff crash
From left, Hannah Hart, Abigail Hart, Sierra Hart, Jeremiah Hart, Jennifer Hart, Devonte Hart, Markis Hart and Sarah Hart. But, investigators say it's unknown if the children were with their parents or might be staying with friends.

MI and Loyola, Villanova and Kansas meet in Final Four
Florida State and Texas A&M were both held five attempts below their season averages in losing to MI in the NCAA Tournament . Put simply, it just doesn't have the offense to win a game against Villanova when the Wildcats are firing on all cylinders.

Saudi crown prince bin Salman meets pro-Israel groups during US visit
While foreigners of other religions can worship privately in Saudi Arabia , there are no public churches, temples or synagogues. Boeing and the Saudi Arabian Military Industries (SAMI) announced a joint venture partnership.

Israel deal for African migrants suspended: Netanyahu
Israel's statement announcing the new plan on Monday said there was no longer a need to send migrants to unnamed third countries. Canada, Italy and Germany are yet to officially confirm their participation in the agreement.

Prince Harry and Meghan Marke choose flowers for royal wedding
Harry and Meghan inspect a movie industry prosthetic foot at a Belfast science park on March 23. Markle may have been planning to leave her marriage long before the summer of 2013.

Kawhi Leonard Has Returned To New York For Rehab
He has been cleared by team doctors but has not felt 100 percent comfortable on the leg when attempting to play or practice. The big question for the Spurs - and their fans - isn't whether Kawhi Leonard is going to return this season.

Stephen Hawking funeral takes place in Cambridge
He achieved worldwide renown after the publication of A Brief History of Time in 1988. He earned worldwide notoriety for his writings about space and time.

Teacher Who Allegedly Had Sex With 2 Students in Same Night Dodges Jail
She claimed she believed the boy to be of the age of consent, but later discovered he was 'way younger than what he had told her'. Goline was convicted of the inappropriate relationships, and on March 27 she pleaded guilty to sexual indecency with a child.

Pernilla Lindberg could make major her first pro victory
There will be no need to bottle up the water in Poppie's Pond for dad again, should she find her way back to the winner's circle. Ayako Uehara shot a 2-under 70 on Saturday to remain five shots off the lead at the ANA Inspiration after three rounds.

Holy Smoak! Slugger hits two homers, as Blue Jays beat Yankees
NY already was missing Jacoby Ellsbury , who's out with an oblique injury, and Clint Frazier , who's recovering from a concussion. Odds are that, with a long way still to go this season, it's a show that will need to be reprised a few more times.