Panera Bread confirmed on April 2 that it was notified of a data leak on its website.
Personal information, including names, addresses, and partial credit card numbers may have leaked, though the company says the investigation is ongoing.
The flaw in the website was fixed as of Monday, but up to 37 million people's information could have been leaked according to an estimate.