Dunkin' says some DD Perks accounts may have been hacked
Dunkin' is warning customers that the username and password for their DD Perks account may have been compromised.
The company said it did not experience a security breach, but third parties had accessed customers' usernames and passwords from other companies' breaches.
Customers' first and last names, their email addresses and their Perks account number may have been compromised.
Dunkin' is warning customers that its mobile order and pay app "DD Perks" may have been hacked.
The coffee and doughnut chain's parent company Dunkin' Brands DNKN revealed Thursday that some usernames and passwords were obtained by third parties, gaining them access to some customers' first and last names, their email addresses and their Perks account number.
The company said it did not experience a security breach, but third parties had accessed customers' usernames and passwords from other companies' breaches and used that information to log into some DD Perks accounts.
Dunkin' was made aware of the breach on Oct. 31 by one of its security vendors, but did not disclose how many accounts were compromised.
The company did not immediately respond to CNBC's request for comment.
Dunkin' said it has launched an internal investigation and has forced a password reset that required all potentially impacted DD Perks members to log out and log back into their accounts using a new password.
The company suggests that guests make unique passwords for their account and not reuse passwords from other online accounts.
More From CNBC
