Let them eat sourdough: ShinyHunters claims Panera Bread as stolen credentials victim

ShinyHunters and associated actors claim multiple large-scale data thefts — including roughly 14 million Panera records and millions more from CarMax, Edmunds, Crunchbase, SoundCloud, and Betterment — using voice-phishing and real-time phishing kits to steal SSO credentials and bypass MFA; victims reportedly had PII and corporate data exfiltrated, and researchers warn of an ongoing targeted campaign.