Bojangles data leak: “It’s breach time!”

After learning of suspicious activity on its corporate network, the American fast food chain Bojangles suffered a data breach.

The California-born restaurant chain, which specializes in Southern fried chicken, suffered a data breach back in February. However, the leak was only discovered in September 2024.

The leak affects an unknown number of individuals. The data involved includes victims' names and other variable data that wasn’t disclosed in the breach notification letter.

Yet, the US-based law firm Strauss Borrelli claims that names, Social Security numbers, driver’s licenses, or other government-issued ID card numbers, financial account numbers or credit or debit card numbers, unique biometric data, genetic information, and health records may have been leaked.

The scope of the sensitive information obtained by the threat actor(s) suggests that the victims of this data leak may have been Bojangles employees. However, this isn’t explicitly stated.

Cybernews has reached out to Bojangles for comment.

The fried chicken chain said that on March 12th, 2024, the company identified suspicious activity on its corporate network. Following this discovery, the fast-food restaurant took action and investigated the matter alongside cybersecurity experts.

After investigating the incident, Bojangles learned that “certain files” were viewed and downloaded by an unknown actor between February 2024 and March 2024.

Bojangles is offering affected individuals 12 to 24 months of complimentary credit monitoring and identity restoration services.

The fried chicken giant has been in business for over 45 years. The chain has around 800 restaurants across 17 states and more than 9000 employees.

In 2023, Bojangles had $1.6 billion worth of system-wide sales alongside $2.1 million in average gross sales from franchised restaurants.