Where does the Starbucks case file come from?

Every entry is taken from the breach report Starbucks lodged with the New Hampshire Attorney General. Nothing here is estimated.

Why do the incident date and the report date differ?

Companies usually investigate before they report. The gap between the two dates shows how long that took.

What does the records-affected figure count?

It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.

Does this case file change over time?

Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Case file

Case File: Starbucks Data Breach

This file collects the dated facts on record for the Starbucks incident. The state report is dated March 12, 2026.

Timeline

March 12, 2026Report filed in New HampshireDate the notice was lodged with the New Hampshire Attorney General.

Case facts

Filing state: New Hampshire
Date reported: March 12, 2026
Receiving office: New Hampshire Attorney General

Case notes

Starbucks recently reported a data security incident to state regulatory bodies in New Hampshire, documented in an official filing dated March 12, 2026. The public record does not provide specific details about the nature of this breach or how it occurred.

The types of personal information involved in this incident have not been disclosed in the public notification. Consequently, any reference to the data involved must be in general terms, such as 'personal information' or 'your data'.

As of the filing date, Starbucks indicates that an investigation into the breach is actively underway. The total number of individuals who may have been affected by this security event has also not been specified in the reported details.

Individuals who believe they may be impacted by this breach are advised to remain vigilant. It is a general best practice to regularly review all personal accounts for any suspicious or unauthorized activity. Additionally, exercising caution with unexpected communications, particularly those requesting sensitive personal details, is recommended.

This case file strictly adheres to the information provided in the public regulatory filing. Further details are anticipated as the investigation progresses and additional information is made public by Starbucks or regulatory authorities.

Questions about this case file

Where does the Starbucks case file come from?: Every entry is taken from the breach report Starbucks lodged with the New Hampshire Attorney General. Nothing here is estimated.
Why do the incident date and the report date differ?: Companies usually investigate before they report. The gap between the two dates shows how long that took.
What does the records-affected figure count?: It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.
Does this case file change over time?: Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

New Hampshire data breaches

Filing source: New Hampshire Attorney General

Named in the Starbucks breach?

Attach your notice and a short note. An attorney checks it against this case file at no cost.

Timeline

Case facts

Case notes

Questions about this case file

More New Hampshire case files