Krispy Kreme
Data Breach on December 20, 2024
| Data Breach Report | |||
|---|---|---|---|
| Victim | krispykreme.com | ||
| Threat Actor | Play | ||
| Date Discovered | Dec 20, 2024 | ||
| Description | Krispy Kreme Doughnut Corporation is a global retailer of premium quality sweet treats, including its signature Original Glazed ® Doughnut. | ||
| Leak Size | Unknown |
Credential Exposure for krispykreme.com
We've indexed 319 @krispykreme.com accounts from external breaches, plus 1,832 credentials for krispykreme.com itself.
Last checked Aug 16, 2026
| @krispykreme.com addresses from external breaches | |
|---|---|
| Third-party breaches | 316 accounts · across 100 breaches · 285 with a plaintext password · most recent Dec 17, 2025 |
| Combo lists | 111 accounts · most recent Aug 6, 2026 |
| Passwords for krispykreme.com accounts | |
|---|---|
| Combo lists | 1,048 logins · most recent Aug 15, 2026 |
| Infostealer logs | 841 logins · 644 infected devices · most recent Aug 8, 2026 |
Logins may belong to customers or to staff, and the data doesn't say which. None of this is necessarily connected to the ransomware attack above.
Is your organization next?
Krispy Kreme was breached. Check if your company's credentials have been exposed in this or other data breaches.
Check your exposure →Continuous dark web monitoring alerts you when we find leaked credentials or session tokens for your company.