Dunkin' Donuts parent settles New York claims over cyberattacks

(Reuters) – The parent of Dunkin' Donuts on Tuesday reached a settlement with New York Attorney General Letitia James to resolve claims it failed to respond to "brute force" cyberattacks that compromised the online accounts of tens of thousands of customers.

Attorney General James said the settlement requires Dunkin Brands Group Inc. to notify affected customers and reset their passwords, provide refunds for unauthorized use of customers' stored value cards, and improve safeguards against future attacks. It must also pay $650,000 in penalties and costs.

“It's time to make amends and finally fill the holes in Dunkin's' cybersecurity," James said in a statement.

Dunkin did not admit or deny liability in agreeing to settle. It did not immediately respond to a request for comment.