Panera Bread breach impacts 5.1 million accounts, not 14 million customers

ShinyHunters claimed a data breach of Panera Bread, leaking an archive that contains roughly 14 million stolen records (about 5.1M unique email addresses and associated PII such as names, phone numbers and physical addresses); the group says the intrusion was achieved via a Microsoft Entra single sign‑on compromise as part of a wider vishing campaign targeting SSO accounts across multiple major organizations. Have I Been Pwned confirmed the exposure of 5.1M unique emails, Panera has notified authorities and the leak follows other ShinyHunters incidents impacting firms like Match Group and SoundCloud.