Krispy Kreme Cyberattack Disrupts Online Orders and Hits Financial Outlook

The doughnut chain reports ongoing digital sales losses and operational disruptions following a cybersecurity breach detected in late November.

Krispy Kreme disclosed a cyberattack on November 29, 2024, which has disrupted online ordering systems in parts of the United States.
While in-person sales and deliveries to retail and restaurant partners remain unaffected, digital sales—accounting for 15.5% of revenue—are significantly impacted.
The company anticipates short-term financial losses due to lost digital sales, cybersecurity consulting fees, and system restoration costs, though it expects no long-term effects.
Krispy Kreme has engaged external cybersecurity experts and notified federal law enforcement while continuing to investigate and remediate the breach.
The company’s stock fell approximately 2% following the announcement, adding to a 30% year-to-date decline amidst broader business challenges.