KFC Owner Discloses Data Breach

A main US quickly food firm has been sending out breach notification letters to people impacted by a ransomware incident that occurred in January.

Yum Brand names – which owns KFC, Taco Bell and Pizza Hut – suffered a ransomware breach on around January 13. In accordance to an SEC filing a few times later on, it was forced to close 300 shops in the Uk for a day as a result.

“Although data was taken from the company’s network and an investigation is ongoing, at this stage, there is no proof that customer databases ended up stolen,” it claimed at the time.

Now a new breach notification letter dated April 6 is staying sent out to an unknown selection of persons, considered to be Yum Brands employees.

Read through much more on ransomware: Meals Shortages at Dutch Supermarkets Just after Ransomware Outage.

While the agency maintains it has viewed “no proof of identity theft or fraud” involving the breached details, it is furnishing complimentary credit score monitoring and id defense for two yrs to all those afflicted.

“As a make a difference of basic precaution, it is generally superior apply to be vigilant against identity theft and fraud by reviewing your account statements and monitoring any obtainable credit rating stories for unauthorized or suspicious action, and by using care in reaction to any email, telephone or other contacts that request for private or delicate information and facts (e.g., phishing),” it advised.

“Yum will in no way ask for sensitive details by phone or email.”

The quickly-food items giant claims it and its subsidiaries make use of around 36,000 persons around the globe like 23,000 in the US. It operates all over 54,000 franchise dining places throughout the globe.

“We have incurred, and may perhaps continue on to incur, selected expenses associated to this attack, together with costs to respond to, remediate and investigate this make a difference,” the firm reported in its 2022 once-a-year report.

“We continue to be subject matter to hazards and uncertainties as a consequence of the incident, together with as a final result of the details that was taken from the company’s network.”

Editorial graphic credit history: T. Schneider / Shutterstock.com

Some parts of this article are sourced from:
www.infosecurity-journal.com