Let them eat sourdough: ShinyHunters claims Panera Bread as stolen credentials victim

ShinyHunters says it stole several slices of data from Panera Bread, but that's just the yeast of everyone's problems. The extortionist gang also claims to have stolen data from CarMax and Edmunds, in addition to three other organizations it posted to its blog last week.

The criminals' claims, seen by The Register and also shared on Daily Dark Web, allege that they stole more than 14 million records from casual bakery-cafe chain Panera Bread, including names, email and home addresses, phone numbers and account details totaling 760 MB of compressed data. They allegedly stole similar types of personally identifiable information (PII) from used-car-buying platform CarMax (over 500,000 records totaling 1.7 GB compressed), and vehicle-review site Edmunds ("millions" of records totaling 12 GB compressed).

None of the three companies immediately responded to The Register's inquiries.

ShinyHunters told us that it gained access to Panera via a ...