BreachScout BreachScout Breach Records

Company-disclosed incident

Cybersecurity incident disclosed by Krispy Kreme, Inc. in a Form 8-K (December 2024)

Organization named: Krispy Kreme
Type as the source lists it: Item 1.05 Material Cybersecurity Incidents

What the sources say

SEC Form 8-K Item 1.05 (material cybersecurity incidents) Primary notice

Disclosed in a 8-K filed Dec. 11, 2024, as listed by the SEC Form 8-K Item 1.05 (material cybersecurity incidents).

Organization as reported
Krispy Kreme, Inc., NC
Category as reported
Item 1.05 Material Cybersecurity Incidents
Notice date as reported
Dec. 11, 2024
Filing date
Dec. 11, 2024
Observed by BreachRecords
2026-10-18 20:31 UTC (revision 8065, doc:dnut-20241211.htm)
Archived copy
Held in the private archive (provenance)

Material Cybersecurity Incidents. On November 29, 2024, Krispy Kreme, Inc. (the “Company”) was notified regarding unauthorized activity on a portion of its information technology systems. The Company immediately began taking steps to investigate, contain, and remediate the incident with the assistance of leading cybersecurity experts. Krispy Kreme shops globally are open, and consumers are able to place orders in person, but the Company is experiencing certain operational disruptions, including with online ordering in parts of the United States. Daily fresh deliveries to our retail and restaurant partners are uninterrupted. The Company, along with its external cybersecurity experts, continues to work diligently to respond to and mitigate the impact from the incident, including the restoration of online ordering, and has notified federal law enforcement. As the investigation of the incident is ongoing, the full scope, nature, and impact of the incident are not yet known. As of the date of this filing, the incident has had and is reasonably likely to have a material impact on the Company’s business operations until recovery efforts are completed. The expected costs related to the incident, including the loss of revenues from digital sales during the recovery period, fees for our cybersecurity experts and other advisors, and costs to restore any impacted systems, are reasonably likely to have a material impact on the Company’s results of operations and financial condition. The Company holds cybersecurity insurance that is expected to offset a portion of the costs of the incident. The Company does not expect this will have a long-term material impact on its results of operations and financial condition. Cautionary Note Regarding Forward-Looking Statements This Form 8-K contains forward-looking statements that involve risks and uncertainties. The words “continues,” “experiencing,” “expect,” “ongoing,” or similar words, or the negative of these words, identify…

The source's own words, from the revision above.

Figures, per source

The linked sources report no figure for this record.

Timeline

Source dates are the dates the sources give. Observation dates are when BreachRecords recorded each revision.

  • Filing date at the SEC Form 8-K Item 1.05 (material cybersecurity incidents)
  • Observed by BreachRecords (revision 8065)
  • Approved by a reviewer

Organizations linked by a reviewer

  • Krispy Kreme Named as the filer Linked 2026-10-19, method identifier.

Archived evidence

  • e608a9aaf40a1b90bd0c98e391b94b90154c9b65d37c69b83bd3a52d8e7d5db0
    text/html, 27,018 bytes, from the SEC Form 8-K Item 1.05 (material cybersecurity incidents), retrieved 2026-10-18 16:29 UTC. Archived privately · Provenance · Source page

Records reflect source filings as of the dates shown. BreachRecords is not a regulator.

Request a correction

A record that disagrees with its source, names the wrong organization or duplicates another is corrected after review. This form is about Cybersecurity incident disclosed by Krispy Kreme, Inc. in a Form 8-K (December 2024). We acknowledge every request within two business days. We reply by email.

The form is being set up. Check back soon.