Starbucks Coffee Company Reports Data Breach to Indiana AG

Starbucks Corp dba Starbucks Coffee Company has officially filed notice of a data security incident with the Indiana Attorney General's office. The company indicated that the breach event took place on February 6, 2026, with the formal reporting to regulators occurring on March 10, 2026.

The nature of the security incident and the specific categories of personal information involved were not detailed in the public record. For precise information regarding the scope of the exposure and what data may have been affected, individuals should refer directly to any official data breach notification letter received from Starbucks.

According to the filing, Starbucks is currently investigating the incident. This ongoing investigation aims to determine the full extent and cause of the data security event.

If you receive a direct notification letter from Starbucks concerning this breach, it is crucial to read it thoroughly. This document will contain specific information relevant to your situation and outline recommended steps to take.

As a general precaution following any data breach notification, it is advisable to monitor your online accounts for any unusual activity. Be vigilant against unexpected communications, such as emails or text messages, that might attempt to solicit personal information, as these could be phishing attempts.