Hackers take a bite out of Krispy Kreme

Stay informed with free updates

Simply sign up to the Cyber Security myFT Digest — delivered directly to your inbox.

Krispy Kreme said a cyber security attack has disrupted its online operations in parts of the US, as the doughnut maker warned it would have a material impact on its business.

The US company said on Wednesday that it had been notified on November 29 of “unauthorised activity” in part of its IT systems, which it had taken steps to contain and remediate.

As a result, it was “experiencing certain operational disruptions, including with online ordering”, Krispy Kreme added. Krispy Kreme sells through in its own stores as well as via supermarkets. Based in Charlotte, North Carolina, the retailer operates in 35 countries.

It said the incident “has had and is reasonably likely to have a material impact on the company’s business operations until recovery efforts are completed”. Its stores remain open, it added.

Krispy Kreme relisted in 2021 following its acquisition in 2016 by European investment group JAB Holding. In the US, the company has been expanded its sales channels by piloting at McDonald’s restaurants.