Strauss Borrelli PLLC, a leading data breach law firm, is investigating International Coffee & Tea, LLC, which does business as The Coffee Bean & Tea Leaf (“CBTL”), regarding its recent data breach. The CBTL data breach may have involved sensitive personal information and protected health information belonging to over 53,000 individuals.
ABOUT INTERNATIONAL COFFEE & TEA, LLC D/B/A THE COFFEE BEAN & TEA LEAF
CBTL is a global specialty coffee and tea house based in California. Founded in 1963, CBTL sells coffee and tea products, including whole coffee beans, ground coffee, organic coffee, single origin coffee, flavored and special reserved coffees with a variety of roasts, whole-leaf teas, tea blend drinks, brewing equipment, and drinkware.3 Additionally, CBTL operates more than 1,100 café locations across more than 20 countries.4 In 2019, CBTL was acquired by Jollibee Foods Corp, a Philippines based restaurant operator. Headquartered in Los Angeles, California, CBTL employs over 10,000 individuals worldwide.
WHAT HAPPENED?
Recently, CBTL announced that it had experienced a data breach in which sensitive personal identifiable information and protected health information in its systems may have been accessed. According to the breach notice, CBTL recently became aware of suspicious activity in its computer environment.1 As a result, CBTL launched an investigation to determine the nature of the incident.
Through its investigation, CBTL confirmed that sensitive personal information in its systems may have been compromised by an unauthorized third party on June 6, 2024. Additionally, CBTL learned of unauthorized access to certain limited email accounts used by the company on or about April 5 to May 29, 2024, and August 28 to August 29, 2024.1 As a result, CBTL began a review of the data to determine what information had been impacted as well as identify the specific individuals affected. While the information impacted varies depending on the individual, the type of information potentially exposed includes:
- Name
- Social Security number
- Date of birth
- Alien registration number
- Driver’s license number
- Passport number
- Tax identification number
- Financial account information
- Payment card information
- Medical information
- Health insurance information
- Username and password
- Digital/electronic signature
Recently, CBTL posted a notice of the incident on its website. Additionally, CBTL plans to mail individual breach notification letters affected individuals. Based on the website breach notice, CBTL is providing affected individuals with a list of the specific types of sensitive information impacted and complimentary credit monitoring. A link to the form breach notification that CBTL posted to its website is below.
If you received a breach notification letter from International Coffee & Tea, LLC d/b/a The Coffee Bean & Tea Leaf:
We would like to speak with you about your rights and potential legal remedies in response to this data breach. Please fill out the form, below, or contact us at 872.263.1100 or sam@straussborrelli.com.