Arby’s franchise class action claims data breach exposed employees info

Arby’s employee class action overview: 

• Who: Plaintiff Alex Ruff filed a class action lawsuit against Arby’s franchise DRM Inc.
• Why: A data breach compromised the personal information of thousands of current and former Arby’s employees.
• Where: The Arby’s data breach class action was filed in federal court in Georgia.

A former Arby’s employee filed a class action lawsuit against a franchise owner over a data breach of the personal information of former and current employees.

The March 12 data breach included information such as names, Social Security numbers, driver’s license, passport information and workers’ compensation information.

Arby’s franchise DRM Inc. began notifying class members of the data breach on April 17.

DRM is accused of failing to properly train employees on cybersecurity, monitor its employees and vendors who handled personal information and failed to maintain reasonable security safeguards for the information, the Arby’s class action says.

“Defendant’s Breach Notice obfuscated the nature of the breach and the threat it posted—refusing to tell its employees how many people were impacted, how the breach happened, or why it took the defendant over a month to finally begin notifying some victims that cybercriminals had gained access to their highly private information,” the Arby’s employee class action says.

Failure to quickly notify Arby’s employees made them vulnerable to identity theft, class action says

The Arby’s employee information was made easily accessible to cybercriminals and DRM’s failure to quickly inform employees of the Arby’s data breach made employees and former employees vulnerable to identity theft without knowing to check financial accounts or credit reports, the lawsuit says.

“Defendant knew or should have known that each victim of the Data Breach deserved prompt and efficient notice of the Data Breach and assistance in mitigating the effects of PII misuse,” the Arby’s class action says.

The lack of prompt notice means the franchise betrayed the trust of employees and former employees and it violated Georgia state law, the Arby’s employee lawsuit claims.

Arby’s Restaurant Group misrepresents the amount of meat contained in some of its products, a September 2023 class action alleges.

Was your personal information compromised in the Arby’s data breach? Let us know in the comments.

The plaintiff is represented by Matthew R. Wilson of Meyer Wilson Co. LPA along with Samuel J. Strauss and Raina Borrelli of Turke & Strauss LLP.

The Arby’s franchise class action lawsuit is Ruff v. DRM Inc. d/b/a Arby’s, Case No. 1:24-cv-01902-SEG, in the U.S. District Court for the Northern District of Georgia Atlanta Division.

Read About More Class Action Lawsuits & Class Action Settlements:

• Accounting firm hit with class action over data breach affecting 1M+
• Kaiser Permanente data breach may affect 13M+ patients
• New Roku data breach announced for second time in a month
• Home Depot data breach exposes employee information