Have you registered yourself on Starbucks website with your credit card details?
Payment history of the users are contained in the Starbucks store account.
It can also perform remote code execution and phishing attack on users and on Starbucks servers.
The hacker can also steal users credit included in victims account, delete account or change victims email address.
However, he did not receive any response from the team.
source: www.techworm.net