Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Scan for outdated or missing drivers - takes under a minute3Repair Windows errors before they cause bigger problemsShort answer: The doughnut chain was Krispy Kreme. The company said it detected unauthorized activity in part of its information-technology environment on November 29, 2024. Online ordering was disrupted in parts of the United States, while shops, in-person purchases and reported deliveries to retail and restaurant partners continued. Krispy Kreme did not publicly confirm ransomware or the theft of customer data.
What happened to Krispy Kreme?
Krispy Kreme disclosed the incident in December 2024 after notifying the company of unauthorized activity affecting part of its IT systems. The company’s wording establishes an incident and operational disruption, but not the attacker’s method or identity. Contemporary reporting summarized the company’s SEC disclosure and statements from its representatives (Cybernews).
| # | Preview | Product | Price | |
|---|---|---|---|---|
| 1 |
|
Krispy Kreme Physical Gift Card | $25.00 | Buy on Amazon |
| 2 |
|
Krispy Kreme eGift Card - $15 - Standard | $15.00 | Buy on Amazon |
| 3 |
|
Krispy Kreme eGift Card - $50 - Standard | $50.00 | Buy on Amazon |
| 4 |
|
Krispy Kreme eGift Card - $25 - Standard | $25.00 | Buy on Amazon |
The phrase “America’s favorite doughnut chain” is headline language, not an independently verified national ranking. The affected business was Krispy Kreme, Inc., not Dunkin’.
Timeline and verified impact
| Date or period | What was reported |
|---|---|
| November 29, 2024 | Krispy Kreme identified unauthorized activity on part of its IT environment. |
| December 2024 | The company publicly disclosed the incident and the effect on online ordering. |
| During recovery | Online ordering was disrupted in parts of the United States while the company worked to restore systems. |
The available report does not establish that every U.S. location, every country, or every digital service was affected. It also does not provide a final restoration date.
#1 Best Overall
- Perfect for all celebrations & occasions - including holidays, thank you’ s, just because gifting, and birthdays - a Krispy Kreme gift card is always sweet surprise!
- Gift a Krispy Kreme gift Card to friends, family, co-workers, neighbors, teachers, service providers, etc.
- Krispy Kreme gift cards can be used on any menu item including fan favorites like Original Glazed Doughnuts, assorted doughnuts, coffees, drinks and more!
- An ideal gift for a sweet treat for yourself or to share with friends and family. Our gift cards will always make any occasion a special one.
- Krispy Kreme gift cards can be redeemed at US participating locations.
Could customers still buy doughnuts?
According to Krispy Kreme’s reported status at the time, physical shops remained open and in-person ordering was unaffected. Fresh doughnuts continued to be available in shops, and deliveries to retail and restaurant partners continued. Those were operational statements for the incident period, not a permanent guarantee for every location.
If you were trying to order online, the disruption was described as affecting parts of the United States. Check the official Krispy Kreme ordering channel or contact the local shop rather than assuming that all online ordering—or all shops—are unavailable.
Rank #2
- Perfect for all celebrations & occasions - including holidays, thank you’ s, just because gifting, and birthdays - a Krispy Kreme gift card is always sweet surprise!
- Gift a Krispy Kreme gift Card to friends, family, co-workers, neighbors, teachers, service providers, etc.
- Krispy Kreme gift cards can be used on any menu item including fan favorites like Original Glazed Doughnuts, assorted doughnuts, coffees, drinks and more!
- An ideal gift for a sweet treat for yourself or to share with friends and family. Our gift cards will always make any occasion a special one.
- Krispy Kreme gift cards can be redeemed at US participating locations.
Was customer information stolen?
No customer-data compromise was publicly confirmed in the available reporting. Krispy Kreme did not disclose what information, if any, was accessed; whether data was exfiltrated; whether payment-card information was involved; how many customers or employees might be affected; or whether breach notices would be sent.
That distinction matters:
- Confirmed: the company reported unauthorized activity and disruption to online ordering.
- Not established: that personal information or payment details were stolen.
- Also not established: that no data was accessed. The public information simply did not resolve that question.
An outage can result from isolating systems during an investigation without proving that customer records were taken.
Rank #3
- Perfect for all celebrations & occasions - including holidays, thank you’ s, just because gifting, and birthdays - a Krispy Kreme gift card is always sweet surprise!
- Gift a Krispy Kreme gift Card to friends, family, co-workers, neighbors, teachers, service providers, etc.
- Krispy Kreme gift cards can be used on any menu item including fan favorites like Original Glazed Doughnuts, assorted doughnuts, coffees, drinks and more!
- An ideal gift for a sweet treat for yourself or to share with friends and family. Our gift cards will always make any occasion a special one.
- Krispy Kreme gift cards can be redeemed at US participating locations.
Was this a ransomware attack?
There is no verified basis in the available material to label the event ransomware. Krispy Kreme did not disclose an extortion demand, encrypted systems, a ransomware group, a leak-site post, negotiations or a ransom payment. “Cybersecurity incident,” “network breach” or “unauthorized activity” is more precise than asserting ransomware.
How Krispy Kreme responded
The company said it began investigating after learning of the intrusion, engaged internal and external cybersecurity specialists, and took containment and remediation steps. It was working to restore online ordering while assessing the incident’s scope, nature and impact.
Rank #4
- Perfect for all celebrations & occasions - including holidays, thank you’ s, just because gifting, and birthdays - a Krispy Kreme gift card is always sweet surprise!
- Gift a Krispy Kreme gift Card to friends, family, co-workers, neighbors, teachers, service providers, etc.
- Krispy Kreme gift cards can be used on any menu item including fan favorites like Original Glazed Doughnuts, assorted doughnuts, coffees, drinks and more!
- An ideal gift for a sweet treat for yourself or to share with friends and family. Our gift cards will always make any occasion a special one.
- Krispy Kreme gift cards can be redeemed at US participating locations.
Business and financial consequences
Krispy Kreme expected short-term effects from lost digital-sales revenue, outside cybersecurity experts and advisers, system restoration, and other response and remediation work. The company said cybersecurity insurance was expected to offset a portion of those costs, but the full financial effect had not yet been determined in the available report.
For historical scale, the company was described at the time as operating more than 1,400 stand-alone shops and in-store retail locations across 36 countries, including more than 400 U.S. locations, with more than 21,000 employees and approximately $1.7 billion in 2023 revenue. Those figures describe the period around the incident and should not be treated as current 2026 totals.
Free tools Windows power users keep installed
One-click scans. No signup required.
What customers should do
- Check availability directly. Use the official Krispy Kreme site or app, or call your local shop, for current online-ordering and pickup information.
- Use in-person ordering where available. The reported incident did not close physical shops.
- Wait for an official notice before taking account-specific action. The available reporting did not establish that customers needed to reset passwords, cancel cards or close accounts.
- Apply normal fraud precautions. Monitor payment and account activity, and report transactions you do not recognize.
- Be skeptical of “refund” or “account recovery” messages. Do not click links in unsolicited emails or social posts claiming to offer Krispy Kreme coupons, refunds or breach assistance; use the company’s known website instead.
What remains unknown
- The initial attack vector, such as phishing, stolen credentials or malware.
- The identity of any threat actor or whether a criminal group was involved.
- Whether information was accessed or exfiltrated.
- The number of affected customers, employees or locations.
- The final date for full online-ordering restoration.
- The incident’s final cost and the amount ultimately covered by insurance.
Why the incident matters beyond doughnuts
Retailers can keep stores and physical distribution operating while a digital-ordering platform is offline. That makes a cyber incident visible to customers as a service outage even when the company has not confirmed a personal-data breach. The reverse is also possible: data exposure can occur without an obvious outage. Treating those as separate questions prevents a disruption from being overstated—or a later privacy notice from being overlooked.
The public record for this event supports a 2024 Krispy Kreme cybersecurity incident that disrupted online ordering in parts of the U.S. It does not support claims of a confirmed ransomware operation, confirmed customer-data theft, nationwide closure or a final dollar loss.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
