[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fygsnlj4rhg9l":3,"$f1vxlzlcvxw6vq":57},{"success":4,"breach":5},true,{"_id":6,"name":7,"title":8,"slug":7,"domain":9,"breachDate":10,"addedDate":11,"publishedAt":12,"modifiedDate":12,"contentUpdatedAt":12,"source":13,"sourceUrl":14,"sourceUrls":15,"pwnCount":16,"affectedCount":16,"affectedCountStatus":17,"affectedCountLowerBound":18,"affectedCountUnit":19,"hasEnglishDescription":4,"contentLocale":20,"availableLocales":21,"translations":31,"severity":42,"dataClasses":43,"description":48,"seoTitle":49,"seoDescription":50,"logoUrl":51,"isVerified":4,"isSensitive":52,"isSpamList":52,"isMalware":52,"company":53},"6a452308a20f867c8ba8e723","panera-bread","Panera Bread 2026年数据泄露","panerabread.com","2026-01-07T00:00:00.000Z","2026-01-31T03:19:30.000Z","2026-10-09T21:36:10.856Z","Third party breach","",[],5112502,"known",null,"unknown","zh",[22,23,20,24,25,26,27,28,29,30],"en","tr","hi","es","ar","fr","bn","pt","ru",{"en":32,"tr":33,"zh":34,"hi":35,"es":36,"ar":37,"fr":38,"bn":39,"pt":40,"ru":41},{"slug":7},{"slug":7},{"slug":7},{"slug":7},{"slug":7},{"slug":7},{"slug":7},{"slug":7},{"slug":7},{"slug":7},"Critical",[44,45,46,47],"Email addresses","Names","Phone numbers","Physical addresses","\u003Cp>2026年1月记录的 Panera Bread 数据泄露是一起大规模事件，涉及这家连锁餐厅及咖啡馆的客户联系记录。该数据集包含超过510万个不重复的电子邮箱地址；相关账户信息还包含姓名、电话号码和实体地址。尽管该公司的声明指出，这些数据属于联系信息，但结合餐厅服务和订单场景，这些记录仍可能被用于有针对性的诈骗。\u003C\u002Fp> \u003Ch2>泄露的数据类型与风险\u003C\u002Fh2> \u003Cp>本记录列出的数据类型包括电子邮箱地址、姓名、电话号码和实体地址字段，未列出密码、支付卡或银行账户字段。因此，主要风险并非直接导致账户被接管，而是客户联系信息可能被用于虚假的订单、退货、促销活动、配送和账户验证消息。\u003C\u002Fp> \u003Ch2>餐厅与会员账户的使用场景\u003C\u002Fh2> \u003Cp>Panera Bread 客户可能已经习惯接收有关餐饮订单、会员账户、配送、门店促销、礼品卡或退货的消息。这类日常沟通使虚假消息更容易显得真实。即使消息中准确写出了用户的姓名、电话号码或地址，也不能仅凭这些信息证明消息来自 Panera Bread。\u003C\u002Fp> \u003Ch2>利用电话与地址信息的诈骗\u003C\u002Fh2> \u003Cp>电话号码字段会增加短信和电话诈骗的风险。用户可能收到虚假的订单退款、积分充值、账户验证、配送费、礼品卡或促销活动链接。用户应使用自己熟悉的应用或通过官方网页访问账户，而不是点击消息中的链接。不要在任何消息中提供验证码、密码或支付卡信息。\u003C\u002Fp> \u003Cp>在配送和门店服务场景中，实体地址信息可以被用来增强消息的可信度。诈骗者可以利用地址信息编造消息，冒充配送信息更正、运费收取、本地门店促销或订阅更新通知。用户在认定含有地址的消息为真实消息之前，应通过独立渠道核实。\u003C\u002Fp> \u003Ch2>已核实的范围与边界\u003C\u002Fh2> \u003Cp>即使本记录不包含密码，如果其中的电子邮箱地址也用于其他账户，仍需保持警惕。餐饮和零售账户经常使用相同的电话号码与电子邮箱组合。攻击者可能尝试在其他订餐、购物或会员计划中使用来自某个平台的联系信息。用户应保持安全通知开启，并留意个人资料是否出现非预期变更。\u003C\u002Fp> \u003Cp>从机构角度看，Panera Bread 事件表明，联系信息也可能像支付数据一样，为社会工程攻击提供有效基础。发送给客户的促销、退款和配送消息应清楚标明域名、链接及所要求提供的信息，并明确说明不会向客户索要支付卡信息、验证码或密码。\u003C\u002Fp> \u003Ch2>必要的防范措施\u003C\u002Fh2> \u003Cp>受影响用户应仔细核查以 Panera Bread 名义发来的订单、退货、配送、礼品卡、会员积分或账户验证消息。即使消息中的个人信息准确，也应直接通过自己熟悉的应用或官方网站办理相关操作。由于本次泄露未列出支付卡数据，主要风险在于联系信息被用于诈骗消息。\u003C\u002Fp> \u003Ch2>长期客户沟通风险\u003C\u002Fh2> \u003Cp>连锁餐厅和咖啡馆的客户账户通常关联会员积分、生日促销活动和已登记的配送地址。因此，仅凭联系信息，就可能让用户误以为自己正在参与真实的促销活动或退款流程。受影响者尤其应警惕承诺赠送礼品卡、优惠券或充值积分的消息。\u003C\u002Fp> \u003Cp>同时掌握电话号码和地址信息，可以让诈骗者通过多个渠道联系用户。同一事项先通过短信提及，随后又通过电话或电子邮件重复出现时，消息可能显得更可信。用户应独立核实来自不同渠道的请求，不要仓促回应要求紧急操作的促销或配送提醒。\u003C\u002Fp> \u003Cp>对机构而言，本记录表明，客户联系信息需要与促销系统一并受到保护。应明确告知客户，在会员和配送流程中，哪些信息绝不会被要求提供。\u003C\u002Fp> \u003Cp>尤其在促销活动密集期间，应更加仔细地核查消息。\u003C\u002Fp>","Panera Bread 2026年数据泄露 (5.1 百万 已报告记录数)","Panera Bread 2026年数据泄露. 据报告，涉及5.1 百万条记录。 已报告的数据：电子邮箱地址, 姓名, 电话号码。 了解影响范围、风险及防护措施。","\u002Fuploads\u002Flogo\u002Fpanerabread_com.webp",false,{"name":54,"sector":55,"country":56,"website":9,"websiteArchiveUrl":14,"websiteStatus":14,"websiteCheckedAt":18},"Panera Bread","Restaurant","United States",{"success":4,"breaches":58},[59,66,73,80],{"slug":60,"title":61,"companyName":62,"logoUrl":63,"breachDate":64,"affectedCount":65,"affectedCountStatus":17},"baydoner","Baydöner 2026年3月数据事件","Baydöner","\u002Fuploads\u002Flogo\u002Fbaydoner_com.webp","2026-03-08T00:00:00.000Z",1266822,{"slug":67,"title":68,"companyName":69,"logoUrl":70,"breachDate":71,"affectedCount":72,"affectedCountStatus":17},"medela","Medela 数据泄露","Medela","\u002Fuploads\u002Flogo\u002Fmedela.webp","2026-09-07T00:00:00.000Z",423947,{"slug":74,"title":75,"companyName":76,"logoUrl":77,"breachDate":78,"affectedCount":79,"affectedCountStatus":17},"dustin-group-2026-data-security-incident","Dustin Group 2026年数据安全事件","Dustin Group AB (publ)","\u002Fuploads\u002Flogo\u002Fdustingroup_com-6aaab48e5041e3a842fe832a-e26a53490c4a5cbe.webp","2026-09-03T00:00:00.000Z",1062841,{"slug":81,"title":82,"companyName":83,"logoUrl":84,"breachDate":85,"affectedCount":86,"affectedCountStatus":17},"elekta-2026-data-breach","Elekta 2026年数据泄露事件","Elekta AB","\u002Fuploads\u002Flogo\u002Felekta-2026-veri-ihlali-afc72236a8ad.webp","2026-09-01T00:00:00.000Z",129576]