MalwareRansomwareData EncryptedRansom DemandedCustomer Data InvolvedPIIIDENTITY_BASICLowContained
YUM! Brands, Inc.
bd_712a74721c6ee198 · schema v1 · pii pii-v1
Full breach record for YUM! Brands, Inc. →Yum! Brands, Inc. reported a ransomware attack occurring on or around January 13, 2023, affecting approximately 621 New Hampshire residents (current/former employees and dependents). Personal information was exposed. Yum! locked down systems, notified law enforcement, engaged forensic experts, and offered 2 years of credit monitoring. Notification letters were sent starting April 14, 2023.
This filing is one of 8 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (7) · sorted by filing gap
- bd_17c063610aa17e65California State AGfiled 2023-04-13Verified
- bd_01aaa01480a1e00bOregon State AGfiled 2023-04-14(1d gap)Verified
- bd_48c445e8e34473fdMontana State AGfiled 2023-04-14(1d gap)Verified
- bd_edd346b972acb4e0Delaware State AGfiled 2023-04-14(1d gap)Verified
Show 3 more filings ↓Show fewer ↑up to 84d gap
- bd_05b2f3b76db7eda6Washington State AGfiled 2023-04-07(6d gap)Verified
- bd_670ffb1c99274f7fMaine State AGfiled 2023-04-07(6d gap)Verified
- bd_930c9d1e16f8cabcSEC 8-Kfiled 2023-01-19(84d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/yum-brands-20230413.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 13, 2023
- Raw hash
- 60cda1563db69e867702e0e837a143f39f4631dd5dc633e1a71dbeca1331288e
Reporting entity
- Name
- YUM! Brands, Inc.norm: yum brands
Victim entity
- Name
- YUM! Brands, Inc.norm: yum brands
Incident
- Discovered
- Jan 13, 2023
- Materiality determined
- —
- Notification sent
- Apr 14, 2023
- Affected individuals
- 621
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for Impact
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified federal law enforcement authorities
Compliance
- Time to disclose
- 13 weeks(90 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.