Apple American Group LLC and Apple American Group II, LLC, the largest Applebee's franchise operator in the United States, experienced a data breach that occurred between April 8 and April 9, 2026. The incident was reported to the California Attorney General on August 18, 2026.
The breach exposed personal identifiable information and protected health information, including names, Social Security numbers, dates of birth, addresses, government ID numbers, financial account information, credit/debit card information, health records, and biometric information. At least 2,992 Vermont residents were identified as affected, though a total U.S. count has not been publicly disclosed in available sources.
More details may emerge as official breach notification letters and other regulatory filings become publicly available. The company offered 12 months of credit monitoring and identity theft protection through CyberScout.