Dunkin

Dunkin' Donuts Reward Program Users' Data Made Vulnerable

The coffee chain says hackers might have accessed customer info through a data breach.

  • By Sydny Shepard
  • Nov 30, 2018

Users of Dunkin' Donuts' rewards program might have had their data made vulnerable after the coffee chain's security vendors discovered a potential breach on Oct. 31. 

In a letter to rewards program users, Dunkin' explained that its own systems had not been compromised, but rather hackers targeted other companies using the usernames and passwords they obtained to try to break into various online accounts across the internet. 

 Dunkin' security stopped most of the attempt, but customers who used their DD Perks username and password for other accounts unrelated to Dunkin' were vulnerable as the hackers were using these credentials to access several different accounts.

While the coffee company says they are unsure of what data might have been made vulnerable, the accounts held information such as customers' first and last names, email addresses and 16-digit DD Perks account number and DD Perks QR code.

Paul Bischoff, a privacy advocate from Comparitech.com, explained that most people don't understand that the information they give one company becomes the information owned by several companies.

“DD Perks account holders might assume they were only handing over personal details to Dunkin Donuts, but this breach and the company's privacy policy proves otherwise," Bischoff said. "Dunkin Donuts shares customers' personal info with service providers, affiliate companies, franchisees, business partners, and other third parties. In this case, a security vendor used by Dunkin Donuts was breached by hackers."

Those affected by the breach might be wondering what they should do to move forward. Bischoff said your best bet is to change your passwords.

"We do not yet know how many customers were affected by the breach," Bischoff said. "DD Perks account holders who receive the notification should change their password immediately. If you use the same password on any other accounts, those should be changed as well. Be on the lookout for phishing emails pretending to be from Dunkin Donuts.

About the Author

Sydny Shepard is the Executive Editor of Campus Security & Life Safety.

Featured

  • Report: 47 Percent of Security Service Providers Are Not Yet Using AI or Automation Tools

    Trackforce, a provider of security workforce management platforms, today announced the launch of its 2025 Physical Security Operations Benchmark Report, an industry-first study that benchmarks both private security service providers and corporate security teams side by side. Based on a survey of over 300 security professionals across the globe, the report provides a comprehensive look at the state of physical security operations. Read Now

    • Guard Services

  • Identity Governance at the Crossroads of Complexity and Scale

    Modern enterprises are grappling with an increasing number of identities, both human and machine, across an ever-growing number of systems. They must also deal with increased operational demands, including faster onboarding, more scalable models, and tighter security enforcement. Navigating these ever-growing challenges with speed and accuracy requires a new approach to identity governance that is built for the future enterprise. Read Now

  • Eagle Eye Networks Launches AI Camera Gun Detection

    Eagle Eye Networks, a provider of cloud video surveillance, recently introduced Eagle Eye Gun Detection, a new layer of protection for schools and businesses that works with existing security cameras and infrastructure. Eagle Eye Networks is the first to build gun detection into its platform. Read Now

  • Report: AI is Supercharging Old-School Cybercriminal Tactics

    AI isn’t just transforming how we work. It’s reshaping how cybercriminals attack, with threat actors exploiting AI to mass produce malicious code loaders, steal browser credentials and accelerate cloud attacks, according to a new report from Elastic. Read Now

  • Pragmatism, Productivity, and the Push for Accountability in 2025-2026

    Every year, the security industry debates whether artificial intelligence is a disruption, an enabler, or a distraction. By 2025, that conversation matured, where AI became a working dimension in physical identity and access management (PIAM) programs. Observations from 2025 highlight this turning point in AI’s role in access control and define how security leaders are being distinguished based on how they apply it. Read Now

Most   Popular

New Products

  • ResponderLink

    ResponderLink

    Shooter Detection Systems (SDS), an Alarm.com company and a global leader in gunshot detection solutions, has introduced ResponderLink, a groundbreaking new 911 notification service for gunshot events. ResponderLink completes the circle from detection to 911 notification to first responder awareness, giving law enforcement enhanced situational intelligence they urgently need to save lives. Integrating SDS’s proven gunshot detection system with Noonlight’s SendPolice platform, ResponderLink is the first solution to automatically deliver real-time gunshot detection data to 911 call centers and first responders. When shots are detected, the 911 dispatching center, also known as the Public Safety Answering Point or PSAP, is contacted based on the gunfire location, enabling faster initiation of life-saving emergency protocols.

  • Unified VMS

    AxxonSoft introduces version 2.0 of the Axxon One VMS. The new release features integrations with various physical security systems, making Axxon One a unified VMS. Other enhancements include new AI video analytics and intelligent search functions, hardened cybersecurity, usability and performance improvements, and expanded cloud capabilities

  • QCS7230 System-on-Chip (SoC)

    QCS7230 System-on-Chip (SoC)

    The latest Qualcomm® Vision Intelligence Platform offers next-generation smart camera IoT solutions to improve safety and security across enterprises, cities and spaces. The Vision Intelligence Platform was expanded in March 2022 with the introduction of the QCS7230 System-on-Chip (SoC), which delivers superior artificial intelligence (AI) inferencing at the edge.