PHP Vulnerability Responses by Company

Krispy Kreme Doughnut Corporation

Companies / web services
Aliases / services
Krispy Kreme US / 米国クリスピー・クリーム / Krispy Kreme Doughnut Corporation
Official website
https://www.krispykreme.com/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

US Krispy Kreme IT records covered by the notice

Response status
Not listed
Response information checked
2026-10-30

Current re-audit: Related incident verified; PHP connection not stated · Research date: 2026-10-30

Unauthorized activity in part of its IT systems was reported November 29, 2024; personal information impact was determined May 22, 2025. Fields are specified individually, with no evidence of misuse reported in the notice.

Scope: A PHP connection and response to the current PHP vulnerabilities are not listed.

What users should do

Check your notice's affected fields, review statements and credit reports, and consider its fraud-alert or credit-freeze guidance. Monitoring assistance is subject to individual enrollment terms.

Official service URL

Source URLs

  1. Official operator evidencehttps://oag.ca.gov/system/files/Krispy%20Kreme%20-%20Sample%20Individual%20Notice%20-%20Confidential.pdfService and operation documentation
Related official sources
  1. Official operator evidenceOfficial information directoryIdentifies Krispy Kreme Doughnut Corporation and the relevant scope.
  2. Official incident noticeOfficial notice; link to this PHP incident unconfirmedIncident scope and guidance for affected people.

Comments