Bojangles’ Restaurants, Inc.

The Vermont Office of the Attorney General disclosed a data breach affecting Bojangles’ Restaurants, Inc., which transpired between February 19, 2024, and March 12, 2024. An unidentified actor gained unauthorized access to certain files, viewing and downloading them. The compromised data includes personal information such as the names of individuals, though the exact number of affected parties remains undisclosed. The breach highlights vulnerabilities in the company’s data security measures, raising concerns over potential misuse of the exposed information. While the full scope of the incident including whether additional sensitive details (e.g., financial records, contact information) were accessed is unclear, the exposure of personal identifiers alone poses risks of identity theft, phishing, or targeted scams. The company has not publicly detailed mitigation steps or whether regulatory penalties may apply. The incident underscores the broader trend of cyber threats targeting the restaurant and retail sectors, where customer and employee data are frequent targets for exploitation.

Source: https://ago.vermont.gov/document/2024-11-19-bojangles-restaurants-data-breach-notice-consumers

TPRM report: https://www.rankiteo.com/company/boj-of-wnc-tn

"id": "boj145082125",
"linkid": "boj-of-wnc-tn",
"type": "Breach",
"date": "2/2024",
"severity": "60",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 'Unknown',
                        'industry': 'Food & Beverage',
                        'location': 'United States',
                        'name': 'Bojangles’ Restaurants, Inc.',
                        'type': 'Restaurant Chain'}],
 'data_breach': {'data_exfiltration': True,
                 'number_of_records_exposed': 'Unknown',
                 'personally_identifiable_information': ['Names'],
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information (PII)']},
 'date_publicly_disclosed': '2024-11-19',
 'description': 'The Vermont Office of the Attorney General reported a data '
                'breach involving Bojangles’ Restaurants, Inc. on November 19, '
                '2024. The breach occurred between February 19, 2024, and '
                'March 12, 2024, with certain files viewed and downloaded by '
                'an unknown actor, potentially impacting the names of '
                'individuals. The number of affected individuals is unknown.',
 'impact': {'data_compromised': ['Names of individuals']},
 'references': [{'date_accessed': '2024-11-19',
                 'source': 'Vermont Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': ['Vermont Office of the '
                                                        'Attorney General']},
 'threat_actor': 'Unknown',
 'title': 'Bojangles’ Restaurants, Inc. Data Breach (2024)',
 'type': 'Data Breach'}