On December 20, 2018, Caribou Coffee notified customers that it had discovered a potential data breach in late November. The incident involved payment-card information, including card numbers and CVV security codes, creating a risk of fraudulent transactions and identity-related abuse. The breach also affected Bruegger’s Bagels and Einstein Bros. Bagels, which, like Caribou, were owned by JAB Holding Company.
The supplied source does not identify the attacker, the precise intrusion date, the number of affected customers, or any confirmed financial losses. It also does not describe a regulatory penalty, lawsuit, or public finding assigning responsibility to a specific executive or vendor. The lasting consequence documented here is the exposure of sensitive payment credentials across multiple consumer brands and the need for affected customers to monitor accounts and replace compromised cards; no further remediation is specified in the source.
