Bell American Group, a major franchise operator of Taco Bell restaurants, disclosed a data breach on August 26, 2026. The company notified affected individuals and the Massachusetts Attorney General on the same date. The incident led to the exposure of sensitive personal information. Data types affected include Social Security numbers, medical records, financial account numbers, driver's licenses, and credit/debit card numbers. The total number of affected individuals is not yet publicly known. Legal actions, including multiple federal class action lawsuits, were filed against entities associated with Taco Bell in late July and August 2026. These lawsuits indicate ongoing litigation related to the breach. Further details about the incident may emerge as investigations progress and court proceedings continue.