Creams Cafe creamscafe.com Creams Cafe data breach: what happened and what to do
In May 2025, about 160,000 Creams Cafe customer records were allegedly obtained. The data included 159,652 email addresses, physical addresses, names and phone numbers.
View all 13,177 breaches- Breach date
- May 2025
- Affected
- 159,652
- Data exposed
- Email addresses, Names, Phone numbers, Physical addresses
- Verified
- Yes
- Last updated
Source: Have I Been Pwned (CC BY 4.0)
Reviewed by Anthon Wansland
Head of Product & Co-Founder
Serus is a privacy company with paid tools to find and remove your personal data. This page is free and based on official sources.
What happened
In May 2025, around 160,000 records of customer data were allegedly obtained from Creams Cafe, the UK dessert parlour chain. According to Have I Been Pwned, the data contained 159,652 unique email addresses. Creams Cafe didn't respond to repeated attempts to disclose the incident, but multiple affected Have I Been Pwned subscribers confirmed the data was legitimate and accurate.
Sources checked: haveibeenpwned.com, consumer.ftc.gov
Last verified against the official page:
What was exposed
The records include names, email addresses, physical addresses and phone numbers. No passwords or payment details are listed.
What that means for you
Name, address, phone and email together are the raw material for targeted phishing and scam calls. A scammer can pretend to be Creams Cafe about an order or refund, or just use your details to make an unrelated scam sound credible. Home addresses also tend to spread to data brokers over time.
What to do
Treat unexpected messages about orders, vouchers or refunds as suspect, and go to the company's website yourself. UK readers can report scams to Action Fraud.
What to do if you were in it
- 1
Expect phishing that mentions the breach
Your name, address and phone number leaked together, so scam calls and texts can sound personal. Don't click links or call numbers in unexpected messages. Go to the company's site yourself, and report scam messages at reportfraud.ftc.gov.
- 2
Report scams in the UK
If you get a scam message, report it to Action Fraud and forward scam texts to 7726.
- 3
Keep your address in mind
Your physical address leaked, so be careful with unexpected deliveries, letters or callers who already know where you live.
- 4
Check whether your email or phone is in this and other breaches
Run a free Serus scan to see which breaches include your email or phone number. Serus also alerts you when your details show up in a new one.
Timeline
-
The breach happened
-
Added to Have I Been Pwned
Frequently asked
Was I affected by the Creams Cafe breach?
If you gave Creams Cafe your details, possibly. Search your email on Have I Been Pwned or run a free Serus scan.
What was exposed?
Email addresses, names, phone numbers and physical addresses.
Did Creams Cafe confirm the breach?
Have I Been Pwned says Creams Cafe didn't respond to repeated attempts to disclose it, but affected subscribers confirmed the data was accurate.
Should I change my password?
No passwords are listed in this breach, so a change isn't needed for this incident. Reused passwords are worth changing anyway.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
