The Krispy Kreme Doughnut Corporation Data Breach: Reported Filing Facts

Krispy Kreme Doughnut Corporation is a global retailer specializing in the production and sale of doughnuts and coffee products. As a retail entity, the company typically collects and stores sensitive customer information related to e-commerce transactions, loyalty program participation, and digital ordering platforms. In 2025, the company officially reported a data security incident to the South Carolina Attorney General, indicating that unauthorized access to its systems may have compromised personal information. If you have received a formal data breach notification letter, it means your personal data was likely stored within the affected systems at the time of the incident. This notice is intended to inform you of the nature of the breach and the specific types of information that were potentially exposed.

State: South Carolina
Reported: June 18, 2025

What to do if you were affected

These general steps can help limit the risk of identity theft and fraud after any data breach.

Stay alert to targeted scams
Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.
Keep your notification letter
Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.

Related data breach cases

Browse all South Carolina data breaches View the full case directory