Lehigh Valley Restaurant Brands reported a data security event in August 2026 after discovering suspicious activity in January 2026. The company determined that certain files were copied without permission in December 2025.
The incident potentially involved Social Security numbers, driver’s license numbers, financial account information, medical information, and health insurance information, with specific data types varying by individual. The total number of affected individuals has not been publicly disclosed. A notice was filed with the Massachusetts Attorney General.
Further details about the incident may emerge as investigations continue. Official notification letters were sent to affected individuals on August 6, 2026.