Starbucks Data Breach Affects Nearly 900 Employees After Phishing Attack
Summary
Starbucks says attackers used credentials obtained through phishing sites mimicking Partner Central to access employee accounts. Nearly 900 employees may have had personal and financial information accessed; affected employees are offered identity protection.
Key points
- Unauthorized access affected Starbucks Partner Central accounts used by employees to manage personal, payroll and benefits information.
- The company’s investigation found attackers obtained credentials through phishing sites designed to mimic the portal.
- Names, Social Security numbers, dates of birth, and financial account and routing numbers may have been accessed.
- The breach affects nearly 900 employees, according to a notification filed with the Maine Attorney General’s Office.
- Account access occurred between January 19 and February 11; Starbucks said it detected the incident on February 6.
- Starbucks said its systems and networks were not directly compromised, based on the limited information it shared.
- Law enforcement was notified, and affected employees are being offered free identity protection services.
Article Details
- Victim Organization
- Starbucks
- Incident Type
- Phishing-based credential theft leading to unauthorized access to employee Partner Central accounts
- Data Types Exposed
- Names
- Social Security numbers
- Dates of birth
- Financial account numbers
- Routing numbers
- Affected Records
- Nearly 900 employees
- Operational Impact
- Unauthorized access to employee accounts occurred between January 19 and February 11. Starbucks said its systems had not been directly targeted and its networks had not been compromised.
- Claim Status
- confirmed
MITRE ATT&CK
T1056.003 · Web Portal CaptureThe attackers reportedly obtained credentials through fake websites mimicking the Partner Central portal, consistent with web portal capture.T1566 · PhishingThe company’s investigation found that credentials were obtained through a phishing attack using fake websites designed to mimic Partner Central.