Ransomware needs a way in. Stolen credentials are the cheapest one.
StarBucks Ransomware Attack
starbucks.comRansomed
Ransom negotiation is currently in progress.
Overview
View group profileDomain
starbucks.com
Industry
Hospitality
Country
United States
Discovered
5 months ago
Attack date
May 21, 2026
Confidence
100%
Severity
High
Status
Negotiating
Threat group
shadowbyt3$Total victims
41
First seen
Feb 2026
Last seen
Sep 2026
Group status
active
Sophistication
0
Impact score
60
Threat level
3.7/10Aggressiveness5/10
Lethality1.4/10
Criticality4.6/10
Status breakdown
Data Leaked29.3%12
Negotiating
this victim
2.4%1Claimed68.3%28
Victim's position within group
Industry
Hospitality
Known target sector
Country
United States
Frequently targeted country
Other victims
View all (41)Same group · shadowbyt3$
Group activity
Monthly attacks · shadowbyt3$
41
total · avg 6.8/mo