On May 21, 2026, the ransomware group "shadowbyt3$" claimed a data breach against Starbucks Company, stating the company did not pay a ransom. This claim was posted on the ransomware group's website.
There is no confirmed information regarding the number of affected individuals or the types of data exposed. Starbucks has not publicly confirmed this incident, and there are no reports of regulatory notifications or lawsuits related to this alleged breach. It remains unclear if any sensitive data, such as SSN, medical, or financial information, was compromised.
Details about data breaches can emerge over time, and official notices may be delayed.