Where does the Krispy Kreme Doughnut Corporation case file come from?

Every entry is taken from the breach report Krispy Kreme Doughnut Corporation lodged with the New Hampshire Attorney General. Nothing here is estimated.

Why do the incident date and the report date differ?

Companies usually investigate before they report. The gap between the two dates shows how long that took.

What does the records-affected figure count?

It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.

Does this case file change over time?

Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Case file

Case File: Krispy Kreme Doughnut Corporation Data Breach

This file collects the dated facts on record for the Krispy Kreme Doughnut Corporation incident. The state report is dated June 18, 2025.

Timeline

June 18, 2025Report filed in New HampshireDate the notice was lodged with the New Hampshire Attorney General.

Case facts

Filing state: New Hampshire
Date reported: June 18, 2025
Receiving office: New Hampshire Attorney General

Case notes

Krispy Kreme Doughnut Corporation has filed an official data breach report with authorities in New Hampshire. This filing, submitted on June 18, 2025, acknowledges an incident where personal information may have been compromised. The specific type or nature of this breach has not been publicly detailed at this time.

According to the public record, Krispy Kreme has not specified the exact categories of personal information involved in this event. Similarly, the number of individuals potentially affected by this incident remains undisclosed in the initial filing. The information involved is referred to in general terms.

The company has stated that the incident is actively under investigation. This process typically aims to establish the full scope of the breach, including how it occurred, what systems were impacted, and precisely what data was exposed. Further details may emerge as the investigation progresses.

For those who receive a direct notification from Krispy Kreme Doughnut Corporation concerning this breach, it is important to carefully read and understand the contents. Individuals are advised to remain vigilant regarding their personal accounts and to consider adopting general data security best practices to help protect their information.

Questions about this case file

Where does the Krispy Kreme Doughnut Corporation case file come from?: Every entry is taken from the breach report Krispy Kreme Doughnut Corporation lodged with the New Hampshire Attorney General. Nothing here is estimated.
Why do the incident date and the report date differ?: Companies usually investigate before they report. The gap between the two dates shows how long that took.
What does the records-affected figure count?: It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.
Does this case file change over time?: Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

New Hampshire data breaches

Filing source: New Hampshire Attorney General

Named in the Krispy Kreme Doughnut Corporation breach?

Attach your notice and a short note. An attorney checks it against this case file at no cost.

Timeline

Case facts

Case notes

Questions about this case file

More New Hampshire case files