Connect with us

Technology

Why Redbox has been powering down

Published

on

Why Redbox has been powering down

Redbox’s field service technicians thought they had seen it all.

Stores had unplugged thousands of the company’s iconic red DVD rental kiosks. Payroll and expense reimbursements had been late. Several employees say their corporate gas cards have been declined. They had read article after article about companies suing Redbox and its corporate parent over unpaid bills. Some of them had dug into financial data, puzzling together an alarming picture of a company drowning in debt. Still, the email they got on a Tuesday in mid-June came as a shock.

“Please stop what you are doing and return home immediately,” the message read, adding: “You will be paid for the rest of the day.”

The sudden work stoppage initially appeared to be due to liability issues. Chicken Soup for the Soul Entertainment, which had acquired Redbox in August of 2022, had informed employees earlier that day that it had been dropped by its health insurance provider; Redbox management seemingly didn’t want to have uninsured workers in the field to service and repair the company’s kiosks.

However, a follow-up email revealed deeper concerns. “We have entered an unforeseen and unprecedented situation for our company,” a senior Redbox manager wrote. The email referenced Chicken Soup’s inability to service its massive debt, as well as its CEO’s sudden decision to push out the entire board of directors. “It is disrupting our day-to-day operation, and we are temporarily halting all field activity until we have clarity on our path forward,” the email added.

Advertisement

Management telling hundreds of employees to stop working out of an apparent frustration with a company’s leadership is unprecedented – but it wasn’t surprising to former employees we spoke to at Redbox. The company has been on a dizzying rollercoaster ride ever since getting acquired two years ago. After failing to pay numerous bills, Redbox and its owner have been sued over a dozen times by companies, including CVS, 7-Eleven, and NBCUniversal. 

When asked about the numerous lawsuits, Chicken Soup for the Soul Entertainment’s corporate communications SVP, Peter Binazeski, told me in March that the company could not comment on ongoing litigation; the company did not respond to a number of follow-up questions about its legal and financial situation.

Attempts to settle with NBCUniversal failed after Chicken Soup missed a required $4 million payment, and Redbox is on the verge of having its entire car fleet repossessed.

So, how did things go so wrong for Redbox? I’ve spent months pouring over lawsuits, regulatory filings, and internal emails, as well as talking to a number of current and former Redbox employees, to find an answer to that question. Many of those conversations took on increasing urgency in June, when, in a matter of weeks, people’s worries shifted from wondering whether they’d have a job by the end of the year to whether there would be a paycheck by the end of the week. And when the paychecks finally stopped coming, employees realized that this may be the end for the last major company to still rent out DVDs.

And it could be: Chicken Soup for the Soul Entertainment filed for bankruptcy at the end of June. 

Advertisement

Things actually appeared to be looking up when Redbox was acquired two years ago. Sure, Chicken Soup for the Soul Entertainment seemed like an odd company to make this move, but there was a plausible backstory here: after the self-help book publisher was sold by its founders in 2008, the company’s new owners began to diversify its revenue streams, adding digital media properties and lifestyle products like pet food. Chicken Soup acquired a bunch of companies over the following years, including the film distribution outlet Screen Media and the pioneering free streaming service Crackle. Chicken Soup’s leadership painted the addition of Redbox as the next step in its quest to build an entertainment media empire.

Building that empire on the back of DVD rentals is not as crazy as it sounds. Netflix shipped DVD rentals to customers for 25 years and used the proceeds from that perpetually shrinking but highly profitable business to become the global streaming juggernaut that it is today. Redbox, founded in 2002, had long been a similar powerhouse in the DVD space, with consumers renting more than 6 billion discs to date. Chicken Soup planned to follow Netflix’s playbook, with CEO Bill Rouhana telling The Verge’s David Pierce last year that Redbox’s kiosks “could be the cash flow machine that allowed us to build out our digital business over the next decade.”

“The first few months were decent,” acknowledged a Redbox employee who spoke to The Verge on the condition that we do not publish their name for fear of retaliation. But soon, warning signs started to pop up. Chicken Soup’s stock price tanked in early 2023 and never recovered. There were some irregularities with paychecks being late. Then, stores started to pull the plugs on kiosks.

“When 7-Eleven pulled our machines, that was huge”

“When 7-Eleven pulled our machines, that was huge,” recalled a second Redbox employee, also speaking on the condition of anonymity. “That was our first big [warning] sign.”

Advertisement

The convenience store chain had Redbox kiosks in front of its stores nationwide, and Redbox was contractually obligated to pay 7-Eleven a percentage of the fees it got from every single rental. A lawsuit filed by 7-Eleven in June alleges Redbox stopped paying those fees last spring. 7-Eleven terminated its contract with Redbox in August of 2023 and demanded that the company pick up its kiosks but says Redbox never did. As a result, 7-Eleven franchisees began to unplug the machines and tape credit card readers shut. Countless inoperable kiosks remain in front of 7-Eleven stores to this day.

7-Eleven wasn’t the only retailer that had a falling-out with Redbox. CVS alleged in a February lawsuit that Redbox stopped paying commissions in Q3 of 2022. Illinois-based chain Sheetz stopped getting payments at the end of 2022, according to its own lawsuit filed in February. Publix pulled all kiosks sometime last year. Kroger began telling customers last month that its Redbox kiosks would stop working soon, and Portland-based Hannaford said it wouldn’t offer access to Redbox anymore by mid-June.

Redbox has not commented publicly on the lawsuits.

Company employees were left in the dark about these rifts. “[We would] find out by working in the field, and there’s a big sign on there that says: ‘As of May 20th, this Redbox is gone,’” said the first employee. “And we’re like: ‘All right, somebody else is suing us.’”

Among the companies suing Redbox and its corporate parent is Automotive Rentals, Inc., or ARI, from which Redbox leases over 400 SUVs and other cars for its service technicians. ARI alleges in its lawsuit that Redbox stopped paying its monthly leasing fees last September; the company terminated its lease agreement with Redbox in March and finally sued in May, alleging that it was owed $7.8 million in unpaid bills. 

Advertisement

A Redbox kiosk outside a CVS store. CVS has filed a lawsuit against the company for failing to pay commissions.
Photo by Mario Tama/Getty Images

In a legal filing, Chicken Soup’s lawyers acknowledged the failed payments, writing that “defendants do not dispute that they owe Plaintiffs money — though there is significant question about how much.” The filing goes on to state that the company had “every intention of making Plaintiffs whole” as soon as it raised the necessary financing to do so.

Redbox employees didn’t initially know about this dispute, either, but they realized something was wrong when they suddenly weren’t able to receive routine maintenance services from ARI anymore. “We couldn’t get anything done,” said the first employee. This included oil changes. “I drive a lot, almost a thousand miles a week,” the employee said. “I’m almost 20,000 miles overdue.” 

“There’s people who are 18,000 miles over getting [their] oil change done because [the company] can’t pay for it,” said the second employee. The problem apparently became so acute this spring that some employees were told they should just go out, buy some motor oil, and top off their cars themselves.

“I’m not popping that hood,” said the first employee. “I am not putting new oil in old oil. That is a no.”

Advertisement

It’s easy to dismiss Redbox as a relic of a bygone era. A company that’s survived long past its prime. The kiosk version of Blockbuster, destined to fail sooner rather than later.

Well before the Chicken Soup acquisition, Redbox leadership realized that times were changing, with people transitioning from physical media to streaming. “Everyone knew that this was eventually going to go away,” said a former Redbox executive, who spoke on the condition that we don’t publish their name as they are still employed in the industry. But they also saw that DVDs had a surprising staying power, especially with less wealthy and less connected consumers. Forty million people still rented physical discs from Redbox kiosks before the pandemic, according to the company’s leadership at the time.

Especially in smaller towns, Redbox kiosks represented a valuable lifeline. “A lot of rural areas don’t have the luxury of high-speed internet,” said the first Redbox employee. “Our kiosk is the only theater in town.” Multiple employees told me that they were often greeted on the street, with people asking about new releases or cheering them on when they fixed a kiosk that had been broken. “People [in these areas] really can’t afford four or five different streaming services,” said the second Redbox employee.

“Our kiosk is the only theater in town.”

Even so, Redbox executives were working on a digital future. Redbox tried to establish a Netflix competitor in partnership with Verizon in 2012 but shuttered the service two years later. In early 2020, Redbox tried again with a free, ad-supported streaming service that seemed a better fit for its lower-income customers and their slow transition to digital media. Redbox customers were late adopters, so executives believed that they had some time to grow the new digital service while renting out DVDs for years to come.

Advertisement

Then, the pandemic happened — and instantly blew up those plans.

With theaters shut down, productions put on hold, and consumers cooped up at home, Hollywood scrambled. Major studios threw out their release schedule and prioritized their own streaming ventures. Disney postponed the theatrical release of Mulan for months, only to eventually take it directly to Disney Plus. Warner Bros. released all of its 2021 movies on HBO Max.

The number of new releases at kiosks nosedived as a result. “Throughout the first three quarters of 2021, Redbox released 33 theatrical titles at the kiosk, which is typically what would have been released in one quarter pre-COVID,” the company told investors in late 2021. With few new discs in kiosks and some of the biggest titles going directly to streaming, even Redbox’s late-adopter customer base began to give Netflix and Disney Plus a look. 

“The pandemic screwed everything up”

“There was deep concern” about this trend internally, according to the former Redbox executive, with some fearing that the company may lose its customers for good to the digital competition. “There was almost no way of bringing them back,” the former executive said.

Advertisement

The results on Redbox’s bottom line were disastrous: the company’s revenue declined from $829 million in 2019 to $546 million in 2020, and then to $289 million in 2021. “It happened really fast,” said the former Redbox executive.

“The pandemic screwed everything up,” said the first Redbox employee.

In the midst of that pandemic-fueled freefall, Redbox was facing corporate upheaval. Redbox’s owner at the time, private equity giant Apollo, began to look at ways to unload the asset. Discussions with Chicken Soup for the Soul Entertainment began in early 2020, and the two companies signed a term sheet in November of that year. However, the deal ultimately fell apart, with Apollo opting for another route: it decided to take Redbox public via a SPAC merger.

SPACs were still all the rage back then, and Redbox seemed like the perfect candidate for meme stock traders looking to hype another company steeped in nostalgia. Chicken Soup’s management, however, thought the public offering was doomed to fail. “Chicken Soup for the Soul Entertainment’s plan was merely waiting for Redbox to implode,” alleged Keith Knee, a former consultant for Chicken Soup, in a lawsuit filed earlier this year.

“They are going to be back, and we are going to be able to get this company for two-thirds of what they are asking for right now,” Chicken Soup CEO Bill Rouhana allegedly told his chief strategy officer, according to the lawsuit.

Advertisement

Chicken Soup for the Soul CEO Bill Rouhana in 2014.
Photo by Isaac Brekken/Getty Images for Chicken Soup for the Soul

Rouhana was right: the public offering quickly devolved into a disaster. Redbox’s stock price tumbled below $2 per share just four months after it went public, and the company went on to lay off 10 percent of its staff. That’s when Chicken Soup for the Soul Entertainment swooped back in, offering “a substantially lower price for essentially the same assets,” according to the Knee lawsuit. Redbox couldn’t afford to say no anymore, and the two companies announced that Chicken Soup would acquire the DVD kiosk company in May of 2022.

Chicken Soup took on $325 million in debt as part of the acquisition, but CEO Bill Rouhana promised everyone a quick turnaround. Revenues of the new combined company were supposed to total $500 million in 2022, and Rouhana painted himself as a buccaneer of sorts, capable of righting the ship amid rough seas.

“The industry is completely chaotic right now,” Rouhana told me when I interviewed him days after the acquisition closed in August of 2022. “It’s a total nightmare. It’s completely in a state of flux. I’m pretty comfortable with that because I believe in the value of the stuff we bought.” Rouhana told me that Redbox kiosks would be around another 10 to 20 years and that Chicken Soup would recoup its money “many times over” before they ultimately disappeared. He kept insisting that he was unmoved by any short-term challenges. 

“I love chaos,” Rouhana said.

Advertisement

Soon, the chaos engulfed Redbox. Instead of the promised $500 million, Chicken Soup only generated $253 million in revenue in 2022. The number of DVD kiosks operated by the company declined from 36,000 at the time of the acquisition to 27,000 at the end of March. The pandemic-induced movie shortage, combined with a declining number of kiosks, led to continued revenue decline. Already loaded with debt, Chicken Soup quickly ran out of money. Attempts to raise more working capital failed, which only made things worse.

“Our inability to secure […]  financing […] hampered our ability to pay for and secure new content, which began to strain relationships with the Company’s creditors, including content providers,” Chicken Soup for the Soul Entertainment wrote in its most recent quarterly report. “As a result, the Company was unable to pay for all the movies that were offered to it by its providers.”

In reality, Redbox hasn’t been able to buy any major new release for quite some time. The last high-profile movie that made it to kiosks is Barbie, which came out on DVD in October. And with no new titles at kiosks, rental revenue has declined even further. In the first three months of this year, Chicken Soup’s revenue from its Redbox retail operations was just $15.5 million — less than half what it was a year ago and just a quarter of what it had been even in early 2021 when the pandemic slowed DVD releases to a trickle.

At the same time, Chicken Soup’s financial situation spiraled. The company ended Q1 with an accumulated deficit of $937 million and less than $5 million in cash on hand. It has been falling further behind on its bills, resulting in former business partners cutting ties and filing lawsuits. 

“The Company has received an increasing number of termination and/or nonrenewal notices from content suppliers and other service providers,” Chicken Soup warned in its Q1 filing.

Advertisement

Internally, the situation quickly devolved. Corporate credit cards that employees have been using to get gas for their cars have only been working intermittently, leaving field service employees unable to do their work for a whole week in May. “They paid us to sit at home and look at emails,” the first employee said. “We weren’t servicing anything,” the second employee added.

That in itself is a problem for the company: A little-known fact about Redbox’s business is that the company’s technicians also service kiosks for Amazon, KeyMe, Pokémon, and other kiosk vendors. Employees told me that the company would bill these companies for each individual service call. “It was a highly profitable part of the business,” said the former Redbox executive. “It’s what kept us afloat,” said the second employee.

However, when employees weren’t able to go out and service these kiosks, Redbox wasn’t making any money. What’s more, not servicing third-party kiosks in time put those business relationships at risk. This month, longtime partner ecoATM stopped working with the company, according to multiple Redbox employees.

Things got worse for Redbox and its employees in June. At the beginning of the month, a court granted ARI’s request to repossess all of the cars Redbox has been leasing from the company. In an email sent days later, Redbox told employees to remove all their personal belongings from the company cars and prepare for the worst. “In the unlikely event that your vehicle is targeted for repossession, comply with all demands and turn over keys immediately,” the email read. In late June, the court followed up with an order that directed the US Marshals Service to seize Redbox’s entire leased fleet of 437 cars.

In mid-June, the company also informed employees via email that it had been dropped by its healthcare provider, and they hadn’t been covered since May. It’s the second time Redbox employees suddenly found themselves without healthcare coverage: at the beginning of this year, Redbox employees discovered that the company-provided health insurance had lapsed in December when Redbox out of the blue switched their health plans to a new provider. The change left employees without coverage for weeks and many with massive bills. Multiple employees told me that their claims eventually got paid, but another employee said that some claims went to collection.

Advertisement

This time around, the company advised employees to proactively watch their healthcare expenses: “We recommend all elective, non-urgent and routine medical appointments be rescheduled,” a company representative wrote in an email to employees. For some, that warning came too late. Multiple employees told me about ongoing medical treatments that could, if not covered by their insurance, bankrupt them personally.  

A still functioning Redbox kiosk in a Walgreens.
Photo by Mario Tama/Getty Images

While asking its employees to watch their expenses, the company itself ran out of cash to meet its most basic obligations. It failed to make payroll in mid-June, with Rouhana promising employees in an email that they would get paid five days late, as the company was “finalizing a financing.” That day came and went, but instead of a check, employees got another email from the CEO. The financing hadn’t closed yet, Rouhana wrote, but he “hoped to fund payroll” the following week — 10 days after paychecks were due.

Attempts to raise $175 million this spring failed, resulting in Chicken Soup for the Soul Entertainment defaulting on debt held by its biggest creditor. Raising more money from public market investors is also a long shot: Chicken Soup’s shares have been trading in penny-stock territory, with Nasdaq threatening to delist the company.

“We appreciate your patience and understanding as we work towards resolution,” Rouhana wrote in his first email following the missed pay date. It was his first companywide email in many months, according to multiple Redbox employees. 

Advertisement

That lack of communication has been especially frustrating to employees. “I wish I could just know what’s going on,” said the first Redbox employee.

Absent any communication about the company’s future, Redbox employees have banded together in group chats to share the little they know with each other. One employee even paid to get access to legal filings to better understand the financial issue. 

“I wish I could just know what’s going on”

At first, these group chats were small, including just a handful of people here and there. When things boiled over in mid-June, employees created a group dedicated to Redbox’s “final days” that has since grown to around 350 members. 

“People are posting any articles they can find that might help bring some light to what’s going on,” said a third Redbox employee with access to the group, who spoke to The Verge under the conditions that we do not name them in this story for fear of retaliation. “Some are starting to reminisce about the good times,” that employee said, but many simply use the group to express their frustration with the situation. “A lot of bitching all day,” the employee quipped.

Advertisement

Then, late Friday, the company sent out an email to employees to inform them that it had filed for bankruptcy. On Monday, they once again heard from Rouhana, who revealed that he was no longer the company’s CEO. His replacement, corporate compliance specialist Bart M. Schwartz, had “an extensive background in helping companies in complex situations,” Rouhana proclaimed. Schwartz emailed employees an hour later to promise that his top priority was their health insurance and compensation.

Redbox’s rank and file don’t seem convinced that help is on the way. On Monday, they started their own GoFundMe for unpaid employees. Any money raised with the campaign will be “disbursed throughout the company minus the owner / CEO,” according to the GoFundMe page.

The company’s field service fleet, meanwhile, remains grounded. A week after first calling the company’s entire field service workforce home, Redbox management told them via email that work would remain paused until Redbox’s parent company met its payroll, reimbursement, and healthcare coverage obligations. All of that hinges on the company securing a special loan that allows bankrupt companies to keep operating.

Some employees I talked to doubt that there will be a job to return to — a sentiment that’s increasingly bubbling up in public. Redbox’s social media accounts have been happily posting through the entire crisis, publishing memes and movie trivia as if nothing had happened — until the company’s dire reality became too hard to ignore.

“Describe your life right now using one movie gif,” tweeted the official Redbox account in late June, days after the company failed to make payroll.

Advertisement

“Here’s mine,” the tweet continued, followed by a GIF of the sinking Titanic.

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Technology

The executive that helped build Meta’s ad machine is trying to expose it

Published

on

The executive that helped build Meta’s ad machine is trying to expose it

Brian Boland spent more than a decade figuring out how to build a system that would make Meta money. On Thursday, he told a California jury it incentivized drawing more and more users, including teens, onto Facebook and Instagram — despite the risks.

Boland’s testimony came a day after Meta CEO Mark Zuckerberg took the stand in a case over whether Meta and YouTube are liable for allegedly harming a young woman’s mental health. Zuckerberg framed Meta’s mission as balancing safety with free expression, not revenue. Boland’s role was to counter this by explaining how Meta makes money, and how that shaped its platforms’ design. Boland testified that Zuckerberg fostered a culture that prioritized growth and profit over users’ wellbeing from the top down. He said he’s been described as a whistleblower — a term Meta has broadly sought to limit for fear it would prejudice the jury, but which the judge has generally allowed. Over his 11 years at Meta, Boland said he went from having “deep blind faith” in the company to coming to the “firm belief that competition and power and growth were the things that Mark Zuckerberg cared about most.”

Boland last served as Meta’s VP of partnerships before leaving in 2020, working to bring content to the platform that it could monetize, and previously worked in a variety of advertising roles beginning in 2009. He testified that Facebook’s infamous early slogan of “move fast and break things” represented “a cultural ethos at the company.” He said the idea behind the motto was generally, “don’t really think about what could go wrong with a product, but just get it out there and learn and see.” At the height of its prominence internally, employees would sit down at their desks to see a piece of paper that said, “what will you break today?” Boland testified.

“The priorities were on winning growth and engagement”

Zuckerberg consistently made his priorities for the company abundantly clear, according to Boland. He’d announce them in all hands meetings and leave no shadow of a doubt what the company should be focused on, whether it was building its products to be mobile-first, or getting ahead of the competition. When Zuckerberg realized that then-Facebook had to get into shape to compete with a rumored Google social network competitor (which he didn’t name, but seemed to refer to Google+), Boland recalled a digital countdown clock in the office that symbolized how much time they had left to achieve their goals during what the company called a “lockdown.” During his time at the company, Boland testified, there was never a lockdown around user safety, and Zuckerberg allegedly instilled in engineers that “the priorities were on winning growth and engagement.”

Advertisement

Meta has repeatedly denied that it tries to maximize users’ engagement on its platforms over safeguarding their wellbeing. In the past weeks, both Zuckerberg and Instagram CEO Adam Mosseri testified that building platforms that users enjoy and feel good on is in their long-term interest, and that’s what drives their decisions.

Boland disputes this. “My experience was that when there were opportunities to really try to understand what the products might be doing harmfully in the world, that those were not the priority,” he testified. “Those were more of a problem than an opportunity to fix.”

When safety issues came up through press reports or regulatory questions, Boland said, “the primary response was to figure out how to manage through the press cycle, to what the media was saying, as opposed to saying, ‘let’s take a step back and really deeply understand.” Though Boland said he told his advertising-focused team that they should be the ones to discover “broken parts,” rather than those outside the company, he said that philosophy didn’t extend to the rest of the company.

On the stand the day before, Zuckerberg pointed to documents around 2019 showing disagreement among his employees with his decisions, saying they demonstrated a culture that encourages a diversity of opinion. Boland, however, testified that while that might have been the case earlier in his tenure, it later became “a very closed down culture.”

“There’s not a moral algorithm, that’s not a thing … Doesn’t eat, doesn’t sleep, doesn’t care”

Advertisement

Since the jury can only consider decisions and products that Meta itself made, rather than content it hosted from users, lead plaintiff attorney Mark Lanier also had Boland describe how Meta’s algorithm works, and the decisions that went into making and testing it. Algorithms have an “immense amount of power,” Boland said, and are “absolutely relentless” in pursuing their programmed goals — in many cases at Meta, that was allegedly engagement. “There’s not a moral algorithm, that’s not a thing,” Boland said. “Doesn’t eat, doesn’t sleep, doesn’t care.”

During his testimony on Wednesday, Zuckerberg commented that Boland “developed some strong political opinions” toward the end of his time at the company. (Neither Zuckerberg nor Boland offered specifics, but in a 2025 blog post, Boland indicated he was deleting his Facebook account in part over disagreements with how Meta handled events like January 6th, writing that he believed “Facebook had contributed to spreading ‘Stop the Steal’ propaganda and enabling this attempted coup.”) Lanier spent time establishing that Boland was respected by peers, showing a CNBC article about his departure that quoted a glowing statement from his then-boss, and a reference to an unnamed source who reportedly described Boland as someone with a strong moral character.

On cross examination, Meta attorney Phyllis Jones clarified that Boland didn’t work on the teams tasked with understanding youth safety at the company. Boland agreed that advertising business models are not inherently bad, and neither are algorithms. He also admitted that many of his concerns involved the content users were posting, which is not relevant to the current case.

During his direct examination, Lanier asked if Boland had ever expressed his concerns to Zuckerberg directly. Boland said he’d told the CEO he’d seen concerning data showing “harmful outcomes” of the company’s algorithms and suggested that they investigate further. He recalled Zuckerberg responding something to the effect of, “I hope there’s still things you’re proud of.” Soon after, he said, he quit.

Boland said he left upwards of $10 million worth of unvested Meta stock on the table when he departed, though he admitted he made more than that over the years. He said he still finds it “nerve-wracking” every time he speaks out about the company. “This is an incredibly powerful company,” he said.

Advertisement
Follow topics and authors from this story to see more like this in your personalized homepage feed and to receive email updates.

Continue Reading

Technology

Panera Bread data breach exposes 5.1M customers

Published

on

Panera Bread data breach exposes 5.1M customers

NEWYou can now listen to Fox News articles!

Another major consumer brand has joined the growing list of companies hit by serious data breaches. Panera Bread has confirmed a cybersecurity incident after the hacking group ShinyHunters claimed it stole millions of customer records.

The breach exposes a wide range of personal details, raising real concerns for anyone who has ever placed an order, created an account or shared contact information with the popular bakery chain.

Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide – free when you join my CYBERGUY.COM newsletter.

SUBSTACK DATA BREACH EXPOSES EMAILS AND PHONE NUMBERS

Advertisement

Panera Bread confirmed a data breach after hackers claimed they stole millions of customer records containing contact information.  (AP Photo)

What happened in the Panera Bread data breach?

ShinyHunters added Panera Bread to its data leak site earlier this year, initially claiming it had stolen more than 14 million customer records. According to the group, the stolen data includes names, email addresses, phone numbers, home addresses and account-related information.

Panera Bread has since confirmed a cybersecurity incident. In a statement to media outlets, the company described the exposed data as customer “contact information” and said it has contacted law enforcement and taken steps to address the incident. Panera has not shared technical details about how the attack occurred or whether customers need to take specific actions.

Even “contact information” can be dangerous in the wrong hands. When combined, these details can be used for identity theft, targeted phishing and highly convincing social-engineering scams.

ShinyHunters claims the attackers accessed Panera’s systems through Microsoft Entra single sign-on (SSO). While Panera has not confirmed that claim, it closely mirrors recent warnings from Okta about a surge in voice-phishing attacks targeting SSO platforms.

Advertisement

In these attacks, criminals pose as IT or helpdesk staff and call employees directly. They pressure targets to approve authentication requests or enter login credentials on fake SSO pages. Once attackers capture session tokens or credentials, they can bypass some forms of multifactor authentication and move laterally through company systems. This approach relies on human trust rather than technical exploits, making it increasingly effective.

How many people were actually affected?

At first glance, claims that 14 million customers were affected suggested an enormous breach. However, researchers at Have I Been Pwned? later clarified that the attackers stole 14 million records, not data tied to 14 million unique individuals.

After reviewing the leaked dataset, researchers now estimate the breach affected approximately 5.1 million unique people. The exposed information includes email addresses along with associated names, phone numbers, and physical addresses.

That distinction matters, but it does not eliminate risk. Once stolen data is released publicly, it can spread quickly across criminal forums and be reused for years.

149 MILLION PASSWORDS EXPOSED IN MASSIVE CREDENTIAL LEAK

Advertisement

The hacking group ShinyHunters leaked stolen Panera customer data online after an attempted extortion failed. (Panera Bread)

Hackers leaked the data after extortion failed

ShinyHunters reportedly attempted to extort Panera Bread before publishing the stolen data. When those efforts failed, the group released a 760MB archive containing millions of customer records on its leak site.

This reflects a broader shift in cybercrime. Instead of locking systems with ransomware, many groups now focus on quietly stealing data and threatening public exposure. These attacks are faster, harder to detect, and often just as profitable.

ShinyHunters has used similar tactics in other high-profile incidents involving Bumble, Match Group, Crunchbase and other consumer platforms.

Lawsuits filed after Panera breach disclosure

The breach has already triggered legal fallout. Multiple class-action lawsuits have been filed in U.S. federal court, alleging that Panera failed to adequately protect customer data.

Advertisement

The lawsuits claim Panera knew or should have known about security weaknesses and seek damages, improved security practices, and long-term identity theft protection for affected customers. Panera has not publicly commented on the litigation.

A troubling pattern for Panera Bread

This is not Panera Bread’s first major security lapse. In 2018, a cybersecurity researcher revealed that Panera had left millions of customer records exposed online in plain text. That incident later led to lawsuits and settlements.

Repeated breaches often point to deeper challenges. Large organizations can struggle to secure cloud services, identity systems, and employee access at scale. When attackers target identity platforms instead of infrastructure, a single mistake can expose millions of records.

We reached out to Panera Bread for a comment, but did not hear back before our deadline. 

GRUBHUB CONFIRMS DATA BREACH AMID EXTORTION CLAIMS

Advertisement

Exposed contact details like names, emails, and addresses can fuel phishing scams and identity theft long after a breach becomes public. (Donato Fasano/Getty Images)

7 steps you can take to protect yourself following the Panera data breach

When a major consumer brand suffers a breach, customers often don’t realize the risk until weeks or months later. These steps help limit what attackers can do with your information if your Panera data falls into the wrong hands.

1) Use a strong, unique password for every account

If you ever created a Panera Bread account, reset its password immediately. If you reused that password anywhere else, those accounts are now at risk, too. Attackers routinely test breached passwords across email, shopping and banking sites.

A password manager helps by generating strong, unique passwords for every account and storing them securely so you never need to reuse credentials. Many password managers also alert you if your email or passwords appear in known data breaches, giving you an early warning to lock things down fast.

Our No. 1 password manager pick includes a built-in breach scanner that checks whether your email address or passwords have appeared in known leaks. If you discover a match, immediately change any reused passwords and secure those accounts with new, unique credentials.

Advertisement

Check out the best expert-reviewed password managers of 2026 at Cyberguy.com.

2) Enable two-factor authentication (2FA) wherever possible

Two-factor authentication (2FA) adds a second step to the login process, usually through an app or device you control. Even if someone gets your password through phishing or a breach, 2FA makes it much harder for them to access your account.

3) Be cautious of phishing messages

Cybercriminals often follow up breaches with fake emails or in-app messages pretending to offer help or security updates. Always double-check the sender and avoid clicking links. When in doubt, open the app or website directly rather than responding to the message. Using strong antivirus software adds another layer of protection by flagging malicious links and blocking known threats before they can do harm. This protection can also alert you to phishing emails and ransomware scams, keeping your personal information and digital assets safe.

Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android and iOS devices at Cyberguy.com.

4) Limit the personal details you share

When names, email addresses, phone numbers and physical addresses are exposed, identity theft becomes a real risk. Identity theft-protection services monitor your personal information, alert you if it appears on the dark web, and watch for attempts to open new accounts in your name.

Advertisement

If something does go wrong, these services often include recovery support to help freeze accounts, dispute fraud, and guide you through the cleanup process.

See my tips and best picks on how to protect yourself from identity theft at Cyberguy.com.

5) Reduce your digital footprint with a data removal service

Scammers don’t rely on one breach alone. They combine leaked data with information from data broker sites to build detailed profiles. Data removal services help remove your phone number, home address and other personal details from hundreds of these sites.

While no service can erase everything, reducing what’s publicly available makes it much harder for criminals to target you with convincing scams or identity fraud. This is one of the most effective long-term ways to lower your risk after any major breach.

Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com.

Advertisement

Get a free scan to find out if your personal information is already out on the web: Cyberguy.com.

6) Secure your email account

Your email account controls password resets for most services. Protect it with a strong password and 2FA. Regularly review login activity and recovery settings, so attackers can’t use your email to take over other accounts.

7) Watch for account changes after breach news

Not every breach leads to immediate account takeovers. In some cases, attackers quietly test access weeks later. That is why staying alert after breach reports matters. Watch for password reset emails you did not request, profile changes you did not make, or new messages you did not send. Unexpected logouts or security alerts are also red flags. If you notice anything unusual, change your password immediately and review your security settings.

Kurt’s key takeaway

The Panera Bread data breach is another reminder that even familiar brands can become major cyber targets. While Panera says only contact information was exposed, that data is often enough to fuel scams and identity theft long after headlines fade. Staying proactive after breach news is now part of protecting your digital life.

Do you still trust large brands to protect your personal information, or have repeated breaches changed how much data you’re willing to share? Let us know by writing to us at Cyberguy.com.

Advertisement

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide – free when you join my CYBERGUY.COM newsletter.

Copyright 2026 CyberGuy.com. All rights reserved.

Continue Reading

Technology

It’s MAGA v Broligarch in the battle over prediction markets

Published

on

It’s MAGA v Broligarch in the battle over prediction markets

Hello and welcome to Regulator, a newsletter for Verge subscribers about the love-hate (but mostly hate) relationship between Silicon Valley and Washington. I hope everyone got to celebrate George Washington’s birthday in their preferred manner: skiing, staycationing, subscribing to The Verge if you haven’t already, etc.

Prediction: this is going to be a mess

Political alliances are rarely permanent, so it’s somewhat predictable that the MAGA-tech bro alliance seems to have fallen apart in the span of a single year. Which side the administration would actually choose, though, was more difficult to foresee.

Last winter, it appeared that two groups were in a tenuous relationship, held together by Elon Musk’s shameless execution of the DOGE agenda and Big Tech signing massive checks to settle Donald Trump’s lawsuits against them. But last night, the Trump administration made a choice: the money. The Commodity Futures Trading Commission (CFTC) announced that they would sue any state who tried to regulate prediction markets like Kalshi — even the Republican states.

On Tuesday, the CFTC filed an amicus brief to the Ninth Circuit Court of Appeals, officially opposing an onslaught of lawsuits filed by the states against betting markets like Kalshi, Polymarket, Coinbase, and Crypto.com. (The latter two, known primarily as cryptocurrency exchanges, have partnered with Kalshi and created a standalone prediction market called OG, respectively.) But unusually, the brief was accompanied by a threat — posted on X, of all places. In a video directly facing the camera posted on Tuesday night, sole CFTC chairman Michael Selig asserted his commission’s authority to regulate prediction markets and stated that the federal government was prepared to sue: “To those who seek to challenge our authority in this space, let me be clear: we will see you in court.”

Advertisement

Had Selig simply written a staid Wall Street Journal op-ed asserting the CFTC’s authority (which he also did), that would have barely raised an eyebrow. But in 2026, a video threat, especially one posted on X, is basically grounds to instigate a political firestorm — one that Spencer Cox, the Republican Governor of Utah, gladly kindled. “Mike, I appreciate you attempting this with a straight face, but I don’t remember the CFTC having authority over the ‘derivative market’ of LeBron James rebounds,” he posted in response (also on X). “These prediction markets you are breathlessly defending are gambling—pure and simple. They are destroying the lives of families and countless Americans, especially young men. They have no place in Utah.” He promised that Utah would continue to pursue litigation and beat the federal government in court if need be.

This wouldn’t be the first time that Utah and Cox have voiced their opposition to federal overreach regarding emerging technology. Last year, they publicly opposed an executive order that would have given the Justice Department the power to sue states passing and enforcing AI regulatory laws. The prediction markets issue hits a particular nerve in Utah: nearly half of the state is Mormon, and the Church of Jesus Christ of Latter-day Saints officially opposes all government-sanctioned forms of gambling, even state lotteries. But Cox’s declaration is what’s known in political circles as a “weathervane”: if one deeply Republican state is pushing back against the Trump administration on a new front, who else on the right might follow suit — and what sorts of new broligarch technologies would they fight against?

Is it a coincidence that Anthropic CEO Dario Amodei’s big visit to Washington happened just as the Pentagon was reconsidering its relationship with the AI company? Over the past two weeks, Amodei published a 38-page letter to Congress warning of the rising existential risks of artificial intelligence, conducted an interview with Axios’s Mike Allen (and sponsored their newsletter), and met with Sens. Elizabeth Warren (D-MA) and Jim Banks (R-IN) on Capitol Hill to support their bill banning the sale of advanced AI chips to China.

But Amodei barely finished his capitol blitz when Axios broke the news over the weekend that the Pentagon wasn’t just impatient with Anthropic’s reticence to use Claude for unrestricted purposes, but that it would actively punish Anthropic for refusing to cooperate by designating them a “supply-chain risk.” If it goes through, any company that wants to work with the military would have to cut ties with Anthropic. As one Pentagon official described it, “It will be an enormous pain in the ass to disentangle, and we are going to make sure they pay a price for forcing our hand like this.”

The Pentagon’s move makes no sense for anyone who sees Claude as a superior AI enterprise product to its competitors at the Pentagon (Gemini, ChatGPT, and Grok). If viewed through the lens of every former interaction that Trump’s had with companies that voiced ideological opposition to his agenda however, their treatment of Anthropic is par for the course. Years ago, for instance, Trump threatened to cut off Amazon’s access to their sweetheart deal with the US Postal Service, in retaliation for Jeff Bezos’ ownership of the then highly critical Washington Post.

Advertisement

But for me, the question is: exactly what caused the ideological break, and how much of it was even about national security? In the past few months, there’s been a bizarre spurt of online messaging from right-wing influencers trying to claim that Anthropic, of all the AI companies, was too woke — the kind of woke that could convince kids to become trans, or DEI-pill them, or whatever lib-coded nightmares a MAGA personality could dream up. There wasn’t much proof that they could point to, other than its employees expressing opinions that could be lib-coded, if you’re not fully reading the entire tweet:

Screenshot va @KatieMiller/X.

Speaking of influencers eating their own:

  • Steve Bannon is under MAGA siege for his 2018 texts with Jeffrey Epstein, newly unearthed from the Justice Department’s Epstein Files, wherein he suggested that Trump should be removed from office using the 25th Amendment. Influencers calling for him to be questioned include Rep. Marjorie Taylor Greene, who broke from Trump and the GOP for trying to bury the Epstein Files, and retired Gen. Mike Flynn. Notably, both of them rose to prominence in 2020 by backing QAnon, the online conspiracy theory that claimed that an elite ring of Satan-worshipping pedophiles were in control of the government. (It may not help Bannon that he called Epstein “God” in one of the texts).
  • Mike Davis, an anti-Big Tech lawyer who previously represented Trump in his lawsuits against Meta, took credit for the ouster of former friend and ally Gail Slater from the Department of Justice’s antitrust division, according to texts obtained by The Free Press. Though the two were once allies due to their shared interest in holding Big Tech accountable, their relationship started fracturing over disagreements about when to enforce antitrust laws and when to go for settlements.
  • And we’re back to Bannon: per The Bulwark, he and fellow MAGA political operative Boris Epshteyn are being sued for their own shady cryptocurrency operation.

The White House is convening a third meeting between the crypto industry and the banking industry this week, continuing to hash out which major financial entity gets to reap the interests from yield-bearing stablecoin accounts (or if they get to bear interest at all). They have until March 1st to deliver draft language for the Senate. Good luck, y’all!

And finally, looksmaxxing Recess.

Can we all agree that HHS Secretary Robert F. Kennedy is framemogging Kid Rock in this video?

Advertisement

See you next week, and send all tips to every way that we list here.

Follow topics and authors from this story to see more like this in your personalized homepage feed and to receive email updates.

Continue Reading

Trending