Starbucks recently confirmed a data breach affecting a subset of its employees after discovering a cybersecurity incident. This breach was the result of unauthorized access to Starbucks Partner Centralaccounts, the internal portal used by employees to manage their employment details.

Key Details of the Breach

• Discovery & Response: Upon detecting the incident, Starbucks launched an investigation and notified law enforcement.
• Affected Parties: The breach specifically impacted “hundreds” of employees (referred to as “partners” within the company).
• Security Measures: The company has since implemented additional security controls to restrict access to Partner Central accounts and prevent further unauthorized entry.

Support for Impacted Employees

To mitigate potential risks like identity theft or fraud, Starbucks is providing the following to affected individuals:

• Identity Protection: Two years of free identity theft protection and credit monitoring services via Experian IdentityWorks.
• Guidance: Employees have been advised to monitor their bank accounts closely for any suspicious activity.

Context of Recent Cyber Incidents

This disclosure follows a separate, major operational disruption in November 2024, when a ransomware attack on third-party vendor Blue Yonder forced Starbucks to use manual “pen and paper” methods for tracking baristas’ hours and processing payroll. While that earlier incident primarily affected back-end scheduling, the most recent breach involves the direct compromise of internal employee account data.