Dunkin’ Brands, Inc.

Companies / web services

Aliases / services: ダンキン・ブランズ / Dunkin / Dunkin Donuts / ダンキンドーナツ / Dunkin’ Brands, Inc.
Official website: https://www.dunkindonuts.com/

Sources identifying the operating company

https://ag.ny.gov/press-release/2020/attorney-general-james-gets-dunkin-fill-holes-security-reimburse-hacked-customers

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

DD membership accounts/stored-value cards

Response status: Not listed
Response information checked: 2026-10-29

Current re-audit: Related incident verified; PHP connection not stated · Research date: 2026-10-29

Credential-stuffing during 2015–2018 compromised accounts and DD-card balances. A 2020 New York settlement required notifications, password resets and refunds for fraudulent use.

Scope: A PHP connection and response to the current PHP vulnerabilities are not listed.

What users should do

Use your notice to check account-record/refund procedures. Do not mistake the historical 90-day reporting period for a currently open claim window.

Official service URL

https://www.dunkindonuts.com/

Source URLs

Operator and official informationhttps://ag.ny.gov/press-release/2020/attorney-general-james-gets-dunkin-fill-holes-security-reimburse-hacked-customersService and operation documentation

Related official sources

Operator and official informationOfficial information directoryIdentifies Dunkin’ Brands, Inc. and the relevant service scope.
2020-09-15 official security noticeOfficial notice; link to this PHP incident unconfirmedCredential-stuffing during 2015–2018 compromised accounts and DD-card balances.