Krispy Kreme Doughnut Delivery Gets Cooked in Cyberattack

Krispy Kreme disclosed an unauthorized activity on portions of its IT systems that disrupted online ordering in late November; retail operations remained open while the company, with external cybersecurity experts, works to restore services and investigate the impact. The SEC filing notes potential material business impact (partially mitigated by cyber insurance), federal law enforcement involvement, and uncertainty about whether customer data was compromised, prompting expert warnings about possible data exposure and supply-chain risk.