New York sues Dunkin' Donuts over cyberattacks

ronjor · Sep 26, 2019

September 26, 2019

NEW YORK (Reuters) - The parent of Dunkin’ Donuts was sued on Thursday by New York Attorney General Letitia James, who accused the chain of failing to protect hundreds of thousands of customers whose accounts were targeted in a series of “brute force” cyberattacks.
Click to expand...

ronjor · Sep 27, 2019

Dunkin' Donuts says there's 'no basis' for lawsuit over 2015 security incident

By Catalin Cimpanu for Zero Day | September 27, 2019
Dunkin' Donuts disputes claims made by New York state officials in recent lawsuit.
Says it's looking forward to proving its case in court.
Click to expand...

guest · Sep 18, 2020

The Dunkin’ Donuts data breach leaves a very bad taste in the mouth
September 17, 2020
https://grahamcluley.com/the-dunkin-donuts-data-breach-leaves-a-very-bad-taste-in-the-mouth/

In early 2015, hackers successfully compromised the online accounts of Dunkin’ Donuts customers.
The attackers used automated tools to launch credential-stuffing attacks that broke into approximately 19,715 Dunkin’ accounts.

In fact, it took until November 2018 for Dunkin’ Donuts to announce publicly that it had suffered a credential stuffing attack, and force a password reset. That’s three years after being initially informed.
It swept the problem under the carpet, until it could no longer be hidden any longer.
Click to expand...

In its own statement, Dunkin’ Donuts churlishly remarks that it has already enhanced its security:

“Long before the New York Attorney General filed suit in this matter, Dunkin’ had voluntarily implemented or enhanced the security measures identified in today’s settlement,” Dunkin’ told The Register.
“We did so not because we were required to by any regulatory or enforcement authority, but because we are committed to protecting our customers’ data. We are continually updating and enhancing our security measures to address ever-evolving cyber security threats, and we use robust information security and data safeguards.”
Click to expand...

It’s simply gobsmacking that a company like Dunkin’ Donuts would know that its customers were being defrauded but did nothing to notify them of the problem for years.
Click to expand...

The Register: Dunkin' Donuts drops some dough to glaze over lawsuit accusing it of covering up customer account hacks

No way to sugarcoat this: New York AG eclairs the 2015 data theft matter settled
Dunkin' Donuts today settled a lawsuit in which it was accused of hushing up the fact hackers siphoned its customers' personal information from its systems in 2015.
Click to expand...

Log in or Sign up

New York sues Dunkin' Donuts over cyberattacks

ronjor Global Moderator

ronjor Global Moderator

guest Guest

Log in or Sign up

New York sues Dunkin' Donuts over cyberattacks

ronjor Global Moderator

ronjor Global Moderator

guest Guest

Useful Searches