Threat Actors Allegedly Listed Starbucks Data on Hacker Forums

An unverified listing claims a threat actor ('anes2010') is selling a database of 176 million Starbucks user records (emails, password hashes, account and loyalty data, card details and balances) on a cybercrime forum for $400; Starbucks has not confirmed the breach and independent validation is lacking. If authentic, the combination of credential and loyalty/payment data could enable phishing, account takeover via credential stuffing, and financial/fraud losses for customers, but the report emphasizes that samples alone do not prove the full dataset's authenticity or origin.