Taco Bell Franchise Operator Bell American Group Discloses Data Breach Impacting Sensitive Personal Information
Bell American Group LLC, a major Taco Bell franchisee based in Indianapolis, Indiana, and part of Flynn Restaurant Group, has reported a data breach that may have exposed sensitive personal information. The incident was disclosed to the Massachusetts Office of Consumer Affairs and Business Regulation on August 26, 2026, with affected consumers notified via mail the same day.
The breach involved a range of personal data, including Social Security numbers, medical records, financial account details, driver’s license numbers, and credit or debit card information. The company did not specify when the incident occurred or when it was first detected.
In response, Bell American Group is offering affected individuals 24 months of free credit monitoring and identity theft protection through TransUnion. Those impacted can enroll via the Cyberscout activation page using a unique code from their notification letter, with a 90-day enrollment window. The company has also established a dedicated assistance line (216-525-2775) and a mailing address for inquiries.
While Bell American Group is one of several Flynn Restaurant Group affiliates to report breaches including Apple American Group, Hut American Group, and Pan American Group it remains unclear whether these incidents are connected.
Source: https://www.claimdepot.com/data-breach/taco-bell-2026
Apple American Group TPRM report: https://www.rankiteo.com/company/flynn-restaurants-group
"id": "fly1787863220",
"linkid": "flynn-restaurants-group",
"type": "Breach",
"date": "8/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Restaurant (Fast Food)',
'location': 'Indianapolis, Indiana, USA',
'name': 'Bell American Group LLC',
'type': 'Franchise Operator'}],
'customer_advisories': 'Affected consumers notified via mail with '
'instructions for enrolling in credit monitoring and '
'identity theft protection',
'data_breach': {'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Social Security numbers',
'medical records',
'financial account details',
'driver’s license numbers',
'credit or debit card '
'information']},
'date_publicly_disclosed': '2026-08-26',
'description': 'Bell American Group LLC, a major Taco Bell franchisee based '
'in Indianapolis, Indiana, and part of Flynn Restaurant Group, '
'has reported a data breach that may have exposed sensitive '
'personal information, including Social Security numbers, '
'medical records, financial account details, driver’s license '
'numbers, and credit or debit card information.',
'impact': {'data_compromised': 'Sensitive personal information, including '
'Social Security numbers, medical records, '
'financial account details, driver’s license '
'numbers, and credit or debit card information',
'identity_theft_risk': 'High',
'payment_information_risk': 'High'},
'references': [{'source': 'Massachusetts Office of Consumer Affairs and '
'Business Regulation'}],
'regulatory_compliance': {'regulatory_notifications': 'Disclosed to the '
'Massachusetts Office '
'of Consumer Affairs '
'and Business '
'Regulation'},
'response': {'communication_strategy': 'Notification letters mailed to '
'affected consumers, dedicated '
'assistance line (216-525-2775), and '
'mailing address for inquiries',
'third_party_assistance': 'TransUnion (credit monitoring and '
'identity theft protection)'},
'title': 'Bell American Group Data Breach Impacting Sensitive Personal '
'Information',
'type': 'Data Breach'}