Krispy Kreme Doughnut Corporation admits to hole in security

Krispy Kreme reported unauthorized access to a portion of its IT systems on November 29, causing operational disruptions to online ordering. The company engaged external cybersecurity experts, warned of potential material financial impact (including lost digital sales and remediation costs) and noted cybersecurity insurance may offset some losses. Krispy Kreme declined to confirm whether the incident involved ransomware or data theft, and the filing may have been later than the SEC's four-business-day reporting expectation; customers were advised to monitor payment cards.