Threat Actors Allegedly Listed Starbucks Data on Hacker Forums

Cybersecuritynews •Abinaya • July 20, 2026

Starbucks has allegedly been listed on a cybercrime forum by a threat actor using the handle “anes2010,” who claims to be selling a database containing 176 million unique user records reportedly extracted in June 2026. Starbucks has not publicly confirmed the alleged security incident, and the claim has not been independently verified. As a result, […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Massive Database Listings for Uber Eats and Starbucks on Cybercrime Forums Threat actors are advertising databases containing 271 million records from Uber Eats and Starbucks on cybercrime marketplaces. The listings include 95 million records from Uber Eats and 176 million from Starbucks, allegedly collected via infostealing malware rather than direct breaches. Cybernews researchers found that the datasets correlate with a large collection of stolen credentials from June 2026. The sample records from both listings show that users are also present in previously leaked datasets, raising doubts about the legitimacy of these claims. Despite the absence of confirmed breaches, the exposed credentials pose a significant risk due to password reuse among users. Security experts warn that attackers could exploit these datasets to access various services, including banking and social media accounts. Both companies have not confirmed any security incidents related to these claims. 2 sources 65

Extracted Entities

Threat Actors Allegedly Listed Starbucks Data on Hacker Forums

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CWE Weaknesses (1)