Ransomware needs a way in. Stolen credentials are the cheapest one.
StarBucks Ransomware Attack
starbucks.comRansomed
Ransom negotiation is currently in progress.
Overview
View group profileDomain
starbucks.com
Industry
Hospitality
Country
United States
Discovered
4 months ago
Attack date
May 21, 2026
Confidence
100%
Severity
High
Status
Negotiating
Threat group
shadowbyt3$Total victims
28
First seen
Feb 2026
Last seen
Jun 2026
Group status
active
Sophistication
0
Impact score
60
Threat level
4.7/10Aggressiveness8/10
Lethality1.4/10
Criticality4.6/10
Status breakdown
Data Leaked14.3%4
Negotiating
this victim
3.6%1Claimed82.1%23
Victim's position within group
Industry
Hospitality
Known target sector
Country
United States
Frequently targeted country
Other victims
View all (40)Same group · shadowbyt3$
Group activity
Monthly attacks · shadowbyt3$
28
total · avg 7/mo