Wend America Group LLC Data Breach Exposes Sensitive Personal Information
Shamis & Gentile P.A., a class action law firm specializing in data breach cases, is investigating a cybersecurity incident involving Wend America Group LLC, a private franchise operator of over 190 Wendy’s restaurants across the District of Columbia, Maryland, Pennsylvania, Utah, Virginia, and West Virginia. The company, part of the Flynn Group’s corporate structure and headquartered in Pittsburg, Kansas, was founded in 2021.
On September 1, 2026, Wend America Group disclosed the breach to the Vermont Attorney General, revealing that sensitive personal data of employees and potentially customers had been exposed. The compromised information includes:
- Social Security numbers
- Government ID numbers
- Financial account codes
- Credit/debit card details
- Health records
- Biometric data
The breach poses significant risks, including identity theft and financial fraud. Affected individuals may be eligible for compensation as legal teams prepare to pursue claims on their behalf. The investigation remains ongoing.
Source: https://www.claimdepot.com/investigations/wendys-data-breach-2026
Flynn Group cybersecurity rating report: https://www.rankiteo.com/company/flynn-restaurants-group
"id": "FLY1788406414",
"linkid": "flynn-restaurants-group",
"type": "Breach",
"date": "9/2026",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"{'affected_entities': [{'customers_affected': 'Employees and potentially '
'customers',
'industry': 'Food & Beverage (Restaurant)',
'location': 'Pittsburg, Kansas, USA',
'name': 'Wend America Group LLC',
'size': '190+ restaurants',
'type': 'Private Franchise Operator'}],
'data_breach': {'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Social Security numbers',
'Government ID numbers',
'Financial account codes',
'Credit/debit card details',
'Health records',
'Biometric data']},
'date_publicly_disclosed': '2026-09-01',
'description': 'Shamis & Gentile P.A. is investigating a cybersecurity '
'incident involving Wend America Group LLC, a private '
'franchise operator of over 190 Wendy’s restaurants. The '
'breach exposed sensitive personal data of employees and '
'potentially customers, including Social Security numbers, '
'government ID numbers, financial account codes, credit/debit '
'card details, health records, and biometric data.',
'impact': {'data_compromised': 'Sensitive personal information including '
'Social Security numbers, government ID '
'numbers, financial account codes, '
'credit/debit card details, health records, '
'and biometric data',
'identity_theft_risk': 'High',
'payment_information_risk': 'High'},
'investigation_status': 'Ongoing',
'references': [{'source': 'Shamis & Gentile P.A.'}],
'regulatory_compliance': {'legal_actions': 'Class action investigation '
'underway',
'regulatory_notifications': ['Vermont Attorney '
'General']},
'title': 'Wend America Group LLC Data Breach Exposes Sensitive Personal '
'Information',
'type': 'Data Breach'}