Brand owner of KFC, Taco Bell and Pizza Hut disclose data breach following ransomware attack

On Thursday 6^th of April 2023, Yum! Brands, the fast food brand operator of KFC, Pizza Hut, Taco Bell, and Habit Burger, started sending data breach notification letters to individuals whose personal information was stolen during a ransomware attack that happened on Friday 13^th of January 2023.

The notification letter revealed that during an ongoing investigation, Yum! Brands have found out the threat actor was able to steal some individuals’ personal information, including names, driver’s license numbers, and other ID card numbers. However, the ongoing investigation had not found evidence that the stolen data had been used for identity theft or fraud. And they had found no evidence that customers were affected by this data breach.

“In the course of our forensic review and investigation, we identified some personal information belonging to employees was exposed during the January 2023 cybersecurity incident” – A statement given to BleepingComputer.