Krispy Kreme Cyberattack Disrupts Online Orders

Krispy Kreme Reports Cybersecurity Incident

Krispy Kreme, the global doughnut retailer, revealed a security breach on Wednesday. This incident has resulted in “certain operational disruptions,” specifically affecting online ordering capabilities within specific regions of the United States.

Details of the Cyberattack

The company formally disclosed the cyberattack through an 8-K filing submitted to the Securities and Exchange Commission (SEC). According to the filing, Krispy Kreme was alerted to unauthorized activity within its IT systems on November 29th.

Immediate action was taken to address the situation. The company initiated an investigation, containment procedures, and remediation efforts, supported by specialized cybersecurity professionals.

Operational Status and Impact

Despite the attack, Krispy Kreme confirmed that retail locations globally remain open and fully operational. Deliveries to wholesale partners, including retail stores and restaurants, are continuing without interruption.

However, the aforementioned disruptions to online ordering are currently being experienced in parts of the U.S. The company is actively working to restore these services.

Ongoing Investigation and Mitigation

“The Company, alongside its cybersecurity consultants, is dedicated to responding to and minimizing the effects of this incident,” the company stated. This includes restoring online ordering functionality and coordinating with federal law enforcement agencies.

The full extent of the breach, its precise nature, and the overall impact are still under investigation and remain currently unknown.

Limited Information Released

When contacted for further clarification, Krispy Kreme spokesperson Cassie Beem provided a statement consistent with the details outlined in the 8-K filing.

Ms. Beem did not respond to direct inquiries regarding the possibility of a ransomware attack, potential data theft involving employee or company information, or a detailed explanation of how the incident is impacting operations and online ordering processes.

Potential Financial Implications

Krispy Kreme indicated in the SEC filing that the incident is expected to have, and is “reasonably likely to continue to have,” a significant impact on its business operations until full recovery is achieved.