--- title: ShinyHunters claims Panera Bread in alleged data theft description: ShinyHunters cybercrime gang claims to have stolen data from Panera Bread (14M records), CarMax (500K records), and Edmunds (millions of records) through... canonical: https://daily.dev/posts/shinyhunters-claims-panera-bread-in-alleged-data-theft-pgaiv4isr twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: ShinyHunters claims Panera Bread in alleged data theft | daily.dev og:description: ShinyHunters cybercrime gang claims to have stolen data from Panera Bread (14M records), CarMax (500K records), and Edmunds (millions of records) through... og:url: https://daily.dev/posts/shinyhunters-claims-panera-bread-in-alleged-data-theft-pgaiv4isr og:image: https://api.daily.dev/og/posts/PgaIv4Isr.png og:image:alt: ShinyHunters claims Panera Bread in alleged data theft og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # ShinyHunters claims Panera Bread in alleged data theft **[The Register](https://daily.dev/sources/theregister)** · 4 min read · 0 upvotes · 0 comments ## Summary ShinyHunters cybercrime gang claims to have stolen data from Panera Bread (14M records), CarMax (500K records), and Edmunds (millions of records) through voice-phishing attacks targeting SSO credentials. The gang allegedly accessed Panera via a stolen Microsoft Entra SSO code, while gaining access to other victims like Crunchbase and Betterment by phishing Okta SSO codes. The attacks combine social engineering phone calls with real-time phishing kits to bypass multi-factor authentication. Security researchers report this is part of an ongoing campaign targeting around 100 organizations, with attackers impersonating IT support to trick employees into entering credentials on fake login pages. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: --- Tags: [#security](https://daily.dev/tags/security), [#cyber](https://daily.dev/tags/cyber), [#authentication](https://daily.dev/tags/authentication), [#data-breach](https://daily.dev/tags/data-breach), [#okta](https://daily.dev/tags/okta) [View this post on daily.dev](https://daily.dev/posts/shinyhunters-claims-panera-bread-in-alleged-data-theft-pgaiv4isr) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"ShinyHunters claims Panera Bread in alleged data theft","url":"https://daily.dev/posts/shinyhunters-claims-panera-bread-in-alleged-data-theft-pgaiv4isr","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/shinyhunters-claims-panera-bread-in-alleged-data-theft-pgaiv4isr"},"datePublished":"2026-01-27T19:53:08.680Z","dateModified":"2026-01-27T19:53:27.834Z","description":"ShinyHunters cybercrime gang claims to have stolen data from Panera Bread (14M records), CarMax (500K records), and Edmunds (millions of records) through...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/f2efd67d752d2f6affa5d5a0818e082a?_a=AQAEulh","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/f2efd67d752d2f6affa5d5a0818e082a?_a=AQAEulh","isAccessibleForFree":true,"articleSection":"The Register","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"The Register","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/66aa2113fdad463992ffcbf0e8963fda","url":"https://daily.dev/sources/theregister"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/shinyhunters-claims-panera-bread-in-alleged-data-theft-pgaiv4isr","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,cyber,authentication,data-breach,okta","timeRequired":"PT4M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"The Register","item":"https://daily.dev/sources/theregister"},{"@type":"ListItem","position":3,"name":"ShinyHunters claims Panera Bread in alleged data theft"}]} ```