Krispy Kreme is currently dealing with a cybersecurity breach that has brought down parts of its online donut ordering service in the US. The company has been working to resolve the issue for over a week now after detecting unauthorized access to its systems on November 29th.
Krispy Kreme got cyberattacked
An unknown security hole led to unauthorized access that brought down online donut ordering systems.
An unknown security hole led to unauthorized access that brought down online donut ordering systems.
Image: Krispy Kreme
In a filing issued to the SEC on Wednesday, Krispy Kreme says it was “notified regarding unauthorized activity on a portion of its information technology systems” and pulled in “leading cybersecurity experts” for remediation.
The event took down Krispy Kreme’s consumer online ordering operations but it has not affected its commercial distribution business. However, the company says there’s “a material impact” on its business operations and that there will be significant financial implications stemming from the incident due to cybersecurity experts’ and advisers’ fees. Otherwise, Krispy Kreme says it has cybersecurity insurance and it does not expect “long-term material impact on its results of operations and financial condition.”
Krispy Kreme declined to comment on the cause of the cybersecurity incident. As speculated in a report by Bleeping Computer, the timeline may suggest the company is negotiating with possible threat actors so as not to leak internal data.
Follow topics and authors from this story to see more like this in your personalized homepage feed and to receive email updates.
