Starbucks Says Breach Exposed Data From 889 Employee Accounts
Summary
Starbucks says attackers used credentials obtained through websites impersonating Partner Central to access 889 employee accounts. Exposed information included Social Security and bank details; the company notified law enforcement and is offering identity protection.
Key points
- Starbucks says attackers accessed 889 Partner Central accounts between January 19 and February 11, 2026.
- The company’s investigation found that attackers obtained login credentials through websites impersonating Partner Central.
- Exposed information included employees’ names, Social Security numbers, dates of birth, and bank account and routing numbers.
- Starbucks discovered the incident on February 6, notified law enforcement, and advised affected employees to monitor their bank accounts.
- The company is offering affected employees two years of Experian IdentityWorks identity protection and credit monitoring and says it strengthened access controls.
Article Details
- Victim Organization
- Starbucks
- Incident Type
- Credential phishing leading to unauthorized access to employee accounts and exposure of personal and financial information
- Incident Date
- 2026-01-19
- Data Types Exposed
- Employee names
- Social Security numbers
- Dates of birth
- Bank account numbers
- Bank routing numbers
- Affected Records
- 889 employee accounts
- Ransom Or Extortion
- None reported
- Claim Status
- confirmed
MITRE ATT&CK
Vendors
Products
Experian IdentityWorksImpacted employees are being offered two years of Experian IdentityWorks credit monitoring and identity protection.Partner CentralStarbucks disclosed a data breach that compromised 889 Partner Central employee accounts, exposing names, Social Security numbers, dates of birth, and bank account and routing numbers.