YUM! Brands, Inc.

Yum! Brands, Inc. reported a data breach to the Oregon Attorney General. The breach was reported on 2023-04-14. The breach occurred during 1/13/2023 - 1/14/2023. The breach was discovered on 3/9/2023. 300,000 individuals were affected. Notice was sent on 4/14/2023.

Yum! Brands, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-04-14. 1,602 Massachusetts residents were affected. The report records the breach type as electronic.

Yum! Brands, Inc. disclosed a cybersecurity incident occurring on or around January 13, 2023, involving unauthorized access to systems. Personal information was exposed. The company locked down systems, notified law enforcement, engaged forensic teams, and deployed enhanced monitoring. Complimentary credit monitoring and identity protection services for two years were offered to affected individuals.

Yum! Brands, Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2023-01-04 and was reported on 2023-04-14. 15,406 Indiana residents were affected.

Yum! Brands, Inc. experienced a cybersecurity incident involving unauthorized access to certain systems on or around January 13, 2023. The company contained the incident, engaged forensic investigators, and notified law enforcement. A review determined that some personal information was exposed. The company is offering two years of complimentary credit monitoring and identity protection services via IDX. No evidence of identity theft or fraud was found at the time of notification.

Yum! Brands, Inc. experienced a cybersecurity incident on or around January 13, 2023 involving unauthorized access to certain of its systems. Upon discovery, the company locked down impacted systems, notified federal law enforcement, engaged digital forensics teams, and deployed enhanced monitoring. A subsequent data review confirmed that personal information belonging to certain individuals was present in affected files. Two years of complimentary credit monitoring and identity protection were offered via IDX.

Yum! Brands, Inc. experienced a ransomware attack on or around January 13, 2023, resulting in unauthorized access to certain systems. The incident affected approximately 621 New Hampshire residents, who are current or former employees or their dependents. Exposed data included personal information such as names and potentially other identifiers. Yum! contained the incident, engaged forensic experts, notified law enforcement, and offered two years of credit monitoring to affected individuals.

Yum! Brands, Inc. notified South Carolina consumers of a cybersecurity incident occurring on or around January 13, 2023. Unauthorized access to systems exposed personal information. Yum! locked down systems, notified law enforcement, engaged forensic investigators, and offered 2 years of credit monitoring.

Yum! Brands, Inc. reported a ransomware incident occurring Jan 13-14, 2023, discovered Jan 13, 2023. The breach affected personal information of 1,220 Washington residents. Yum! locked down systems, notified law enforcement, engaged forensic investigators, and deployed enhanced monitoring. Affected individuals received 2 years of credit monitoring.

Yum! Brands, Inc. reported a ransomware attack that occurred on January 13, 2023, and was discovered on March 9, 2023. The breach affected 11 Maine residents, compromising their names and driver's license or non-driver identification card numbers. Impacted individuals were notified on April 7, 2023, and offered two years of identity protection services.

Yum! Brands, Inc. disclosed a ransomware attack on January 18, 2023, impacting IT systems and causing temporary disruption to less than 300 UK restaurants. The company took systems offline, engaged forensic professionals, and notified federal law enforcement. While data was exfiltrated, customer databases were reportedly not stolen.

YUM! BRANDS, INC. filed a data-breach notice with the Illinois Attorney General during 2023 (case 23-253). The register records the breach as discovered on March 9, 2023. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.