Panera Bread, others allegedly breached by ShinyHunters

Hacking group ShinyHunters has claimed to have pilfered over 14 million records from U.S. multinational bakery-cafe chain Panera Bread, as well as millions of records from vehicle shopping guide Edmunds and over 500,000 records from used vehicle retailer CarMax, The Register reports.

While Panera Bread had its customers' names, phone numbers, email and home addresses, and other account information stolen through a compromised Microsoft Entra single sign-on code, Edmunds and CarMax have been breached in earlier attacks, according to ShinyHunters. CarMax was previously noted to have been victimized by ShinyHunters-linked Scattered Lapsus$ Hunters as part of its sweeping Salesforce attack.

Such a development comes just days after ShinyHunters took responsibility for stealing over 50 million records from SoundCloud, Betterment, and Crunchbase, with the latter two infiltrated by voice-phishing Okta SSO codes. More than 100 organizations were reported by Silent Push to have already been targeted as part of the newest ShinyHunters attack campaign.