Krispy Kreme Cyberattack: Preparing for Business Disruption

Krispy Kreme reported unauthorized activity on its systems on November 29, 2024, which disrupted online ordering in parts of the United States while stores stayed open. The company said the incident could have a material impact and that it had brought in outside cybersecurity experts and notified federal law enforcement. It also said it expected cyber insurance to cover some recovery costs.

What the story shows

  • Any business can be affected, including familiar consumer brands.
  • Disruption has a price beyond the immediate fix: lost sales, expert fees and staff time.
  • Preparation matters: a plan and the right insurance change how bad the situation becomes.

How a small business can prepare

  • Know your critical systems: online ordering, email, payments, phones. Decide how you would operate if one went down.
  • Back up and test restores for those systems.
  • Write an incident plan with contacts for your IT provider, insurer and law enforcement guidance.
  • Review cyber insurance: insurers often ask about MFA, backups and training, and managed IT can help you document them.

Related reading

Talk to a local team

PDX Information Technology Services provides managed IT, cybersecurity and compliance support for small businesses in Portland, Lake Oswego, Beaverton, Hillsboro and Vancouver, WA. Plans start at $100 per user per month (Gold) and $180 per user per month (Platinum). Call 971-331-4871 or book a free assessment.

Get In Touch

Share On Social Media

Other Recent Blog Articles

Shadow AI in Small Business: How to Find It and Fix It in 2026

October 13, 2026

Shadow AI is the AI your team already uses without IT knowing: personal ChatGPT accounts, free notetakers, and AI browser extensions. Here is how a Portland-area small business can find it without a witch hunt, give people a safer option, and lock down the risky parts in 30 days.

Restaurant QR Code Scams: How a Fake Menu Sticker Steals Your Card

October 13, 2026

At a lot of Portland restaurants these days, there’s no paper menu. You get a little QR code on a table tent, you scan it, and you order. It’s convenient,…

Hacked? What Portland CPAs, Financial Advisors, and Medical Offices Must Report After a Data Breach (and the Fines If You Don’t)

October 9, 2026

If you run a CPA firm, tax practice, financial advisory office, or medical clinic anywhere from Hillsboro to Gresham or Wilsonville to Vancouver, WA, a breach starts several reporting clocks…