Creams Cafe Data Breach: 159,652 Customer Accounts Compromised

TL;DR

In May 2025, Creams Cafe, a popular UK dessert parlour, experienced a significant data breach affecting 159,652 customer accounts. The compromised data included email addresses, physical addresses, names, and phone numbers. Despite multiple attempts to contact Creams Cafe, the company did not respond to disclose the incident. The legitimacy of the breach was confirmed by impacted subscribers of Have I Been Pwned (HIBP).

Creams Cafe Data Breach: Overview

In May 2025, a substantial data breach occurred at Creams Cafe, widely known as “the UK’s favourite dessert parlour.” This incident resulted in the unauthorized access of approximately 159,652 customer records. The compromised data included:

• Email Addresses
• Physical Addresses
• Names
• Phone Numbers

Despite repeated attempts to reach out to Creams Cafe for a statement or disclosure regarding the breach, the company did not respond. However, the legitimacy and accuracy of the leaked data were confirmed by multiple impacted subscribers of Have I Been Pwned (HIBP)¹.

Impact and Implications

Data breaches of this nature can have severe consequences for affected individuals. The exposure of personal information such as email addresses, physical addresses, names, and phone numbers can lead to various forms of identity theft and fraud. Customers of Creams Cafe are advised to:

• Monitor their accounts for any suspicious activity.
• Change their passwords and enable two-factor authentication where possible.
• Be wary of phishing attempts that may use the compromised information.

Conclusion

The Creams Cafe data breach serves as a reminder of the importance of robust cybersecurity measures and timely incident response. Companies must prioritize data protection to safeguard customer information and maintain trust. For more detailed information, you can visit the full article on Have I Been Pwned¹.

Additional Resources

For further insights on data breaches and cybersecurity, consider exploring the following resources:

• Have I Been Pwned
• National Cyber Security Centre (NCSC)
• Cybersecurity & Infrastructure Security Agency (CISA)

References

1. (2025). “Creams Cafe Breach”. Have I Been Pwned. Retrieved 2025-07-23. ↩︎ ↩︎²