In April 2026, Apple American Group LLC and Apple American Group II, LLC, the largest Applebee's franchisee in the United States, experienced a data breach. The company reported the incident to the California Attorney General on August 18, 2026, and to the Vermont Attorney General, affecting 2,992 Vermont residents. The breach dates were identified as April 8-9, 2026. The disclosed data types included names, Social Security numbers, dates of birth, addresses, government-issued identification numbers, financial account and credit/debit card information, health records, and biometric information. This means Social Security numbers, medical information, and financial data were all involved. The company is providing 12 months of credit monitoring through CyberScout to affected individuals. Details surrounding the full scope of the incident and any further regulatory actions may emerge over time. Affected individuals were instructed to refer to the notification letters they received for specific details and guidance.