Hut American Group Data Breach Investigation

Hut American Group LLC, a Pizza Hut franchisee owned by Flynn Restaurant Group, has disclosed a data breach that exposed sensitive personal and health information. The company sent notice to the Texas Attorney General on August 21, 2026, noting that 3,528 Texas residents were affected. Letters are going out by mail now.

The exposed information covers names, addresses, and dates of birth were involved. So were Social Security numbers, driver's license numbers, and other government IDs like passports and state ID cards.

Financial details got caught up in this too, including account numbers and credit or debit card information. Some protected health information was exposed as well, including medical records and health insurance data.

Around the same time, Apple American Group, another Flynn company and the largest Applebee's franchise operator in the country, reported its own separate data incident to several state attorneys general. It's not clear yet whether the two breaches are connected in any way.

What Are Your Legal Options?

Breaches like this don't just cause a headache for a few weeks. Social Security numbers and government IDs can be used for identity theft for years after the fact. Financial information opens the door to unauthorized charges or someone taking over your accounts, and medical or insurance data can lead to fraudulent claims filed in your name.

If you get a notification letter, it should spell out how to sign up for free credit monitoring or identity protection, along with any deadlines for enrolling. Haven't gotten a letter but think your information might have been involved anyway? Contact the company or a data breach lawyer to investigate.

In the meantime, keep an eye on your credit reports, bank statements, and card activity. Check medical bills and explanation-of-benefits forms too, since fraud there can slip by unnoticed for a while. A fraud alert or credit freeze with the major credit bureaus is worth setting up as an extra layer of protection.

Companies have legal obligations and state breach notification laws require them to investigate and notify people affected, and when health information is involved, federal rules kick in as well. Depending on what happened, people whose data was exposed may have grounds to pursue claims over inadequate security.

If you were affected by the Hut American Group breach, talking to an attorney who handles data privacy cases can help you figure out where you stand and whether it makes sense to take further action. Call us now to learn more.