McDonald’s
Data Breach on October 06, 2025
| Data Breach Report | |||
|---|---|---|---|
| Victim | mcdonalds.com | ||
| Threat Actor | ScatteredLAPSUSHunters | ||
| Date Discovered | Oct 06, 2025 | ||
| Description | McDonald’s Corporation is a U.S.-based multinational fast food company based in USA, operating a global network of restaurants known for burgers, fries, and its large footprint in the quick service restaurant (QSR) industry. | ||
| Leak Size | 28GB |
Credential Exposure for mcdonalds.com
We've indexed 11,973 @mcdonalds.com accounts from external breaches, plus 5,073 credentials for mcdonalds.com itself.
Last checked Aug 16, 2026
| @mcdonalds.com addresses from external breaches | |
|---|---|
| Combo lists | 11,368 accounts · most recent Aug 15, 2026 |
| Third-party breaches | 834 accounts · across 97 breaches · 603 with a plaintext password · most recent Dec 18, 2025 |
| Phishing pages | 19 accounts · most recent Aug 13, 2026 |
| Passwords for mcdonalds.com accounts | |
|---|---|
| Combo lists | 4,273 logins · most recent Aug 15, 2026 |
| Infostealer logs | 1,059 logins · 849 infected devices · most recent Aug 8, 2026 |
Logins may belong to customers or to staff, and the data doesn't say which. None of this is necessarily connected to the ransomware attack above.
Is your organization next?
McDonald’s was breached. Check if your company's credentials have been exposed in this or other data breaches.
Check your exposure →Continuous dark web monitoring alerts you when we find leaked credentials or session tokens for your company.