Starbucks Data Breach Exposes Employee SSNs and Financial Information

Starbucks has confirmed a data breach that exposed sensitive personal and financial information of employees after attackers gained unauthorized access to internal Partner Central accounts. The incident was discovered on February 6, 2026, when investigators found that threat actors used phishing websites designed to mimic the official Partner Central login page to steal employee credentials and access real accounts.

According to the breach disclosure filed with the Maine Office of the Attorney General, the compromised data includes full names, Social Security numbers, dates of birth, and financial account details. This type of information significantly increases the risk of identity theft, financial fraud, and unauthorized transactions for affected individuals.

Following the discovery, Starbucks launched an investigation with cybersecurity experts and strengthened security controls for Partner Central accounts. The company is offering affected employees 24 months of identity protection and credit monitoring through Experian IdentityWorks, which includes credit monitoring, dark web surveillance, and identity theft insurance. Security experts also advise employees to monitor financial accounts, enable fraud alerts, and avoid suspicious emails requesting personal information.

NPAV offers a robust solution to combat cyber fraud. Protect yourself with our top-tier security product, FraudProtector.net