KFC, Pizza Hut parent company suffers data breach after ransomware attack

Top Class Actions’s website and social media posts use affiliate links. If you make a purchase using such links, we may receive a commission, but it will not result in any additional charges to you. Please review our Affiliate Link Disclosure for more information.

KFC, Pizza Hut data breach overview: 

• Who: KFC and Pizza Hut parent company Yum! Brands has been sending data breach notification letters to an undisclosed number of individuals following a January data breach. 
• Why: The company said hackers were able to steal names, driver’s license numbers, and other ID card numbers during the data breach. 
• Where: Nationwide. 
• What are my options: Consumers wishing to better secure their own data may find options from Norton LifeLock.

Yum! Brands, the parent of KFC and Pizza Hut, has sent data breach notification letters to an undisclosed number of individuals that the company said had their personal information stolen during a ransomware attack in January.

Yum! Brands had previously said that, while some data was stolen from its network during the data breach, the company had no evidence any customer information had been taken by the hackers, Bleeping Computer reports.

Information stolen during the data breach included names, driver’s license numbers, and other numbers belonging to ID cards, according to the data breach notification letters. 

“We are writing to provide you with information about a cybersecurity incident involving your personal information that occurred in mid-January 2023,” Yum! Brands said in its data breach notification letter.

Yum! Brands said in its letter an investigation had turned up no evidence any of the information stolen during the data breach had been used to perpetrate either identity theft or fraud. 

Yum! Brands temporarily shut down around 300 restaurants in UK following January data breach 

The company had to temporarily shut down around 300 of its restaurants in the UK for a day on account of the data breach, Yum! Brands disclosed in its 2022 annual report filing with the U.S. Securities and Exchange Commission (SEC) on April 7. 

“We have incurred, and may continue to incur, certain expenses related to this attack, including expenses to respond to, remediate and investigate this matter,” Yum! Brands said in the 2022 annual report. 

Yum! Brands previously reassured its investors in a January filing with the SEC that the cyberattack would not negatively affect the company financially, Bleeping Computer reports. 

“While this incident caused temporary disruption, the company is aware of no other restaurant disruptions and does not expect this event to have a material adverse impact on its business, operations or financial results,” Yum! Brands said, in the report. 

A number of entities — including Google Fi, Pepsi Bottling Ventures, Reddit, Weee! and the U.S. Marshals Service — have recently suffered or disclosed data breaches that exposed company information and/or impacted consumers and/or employees. 

Were you affected by the Yum! Brands data breach? Let us know in the comments! 

Read About More Class Action Lawsuits & Class Action Settlements:

• Recent business, gov’t data breaches affect consumer and company information
• Fortra class action claims data breach affects 1 million customers
• Sound Generations data breach class action settlement
• TMX Finance faces four class actions over data breach that affects 4.8M customers