Starbucks has disclosed a data breach that exposed sensitive information belonging to hundreds of employees after threat actors gained access to internal accounts.
The coffee chain discovered the incident on February 6 following suspicious activity involving its Starbucks Partner Central system, which is used to manage employment details, benefits, and HR records. A joint investigation with external cybersecurity experts later confirmed that attackers had compromised 889 employee accounts.
According to the company, the attackers accessed the accounts between January 19 and February 11 after obtaining login credentials through phishing websites that impersonated the Partner Central portal.
The exposed data may include employees’ names, Social Security numbers, dates of birth, and bank account and routing numbers.
Starbucks has notified law enforcement and urged affected employees to monitor their financial accounts for signs of fraud or identity theft. The company is also offering two years of free credit monitoring and identity protection through Experian IdentityWorks.
Starbucks said it has taken steps to strengthen security controls for Partner Central access while continuing to investigate the breach.
Comments