Newk's Holding Company, the parent company of the Newk's Eatery restaurant chain, suffered a data breach involving unauthorized access to its internal systems between January 19–26, 2025. The breach was discovered later, with an investigation confirming on August 27, 2025, that personally identifiable information (PII) of at least 2,664 individuals including current and former employees was compromised. Exposed data may include names, addresses, dates of birth, Social Security numbers, driver’s license/state ID copies, health insurance details, and financial account information. The breach caused a network disruption, blocking access to critical internal systems. While the full scope of the attack remains undisclosed, the company notified affected individuals via mail (starting October 28, 2025) and reported the incident to the Maine Attorney General’s office. In response, Newk’s secured compromised systems, engaged third-party cybersecurity experts, and offered 12 months of free credit monitoring and identity protection services to victims. A dedicated assistance line was also established to address concerns, though the long-term financial, reputational, and operational impacts remain uncertain.
Source: https://www.claimdepot.com/data-breach/newks-eatery-2025
TPRM report: https://www.rankiteo.com/company/fsc-franchise-co
"id": "fsc3102231103025",
"linkid": "fsc-franchise-co",
"type": "Breach",
"date": "1/2025",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"{'affected_entities': [{'customers_affected': '2,664 individuals (current and '
'former employees)',
'industry': 'Food & Beverage / Hospitality',
'name': "Newk's Holding Company (Newk's Eatery)",
'type': 'Restaurant chain (parent company)'}],
'customer_advisories': 'Mail notifications and dedicated assistance line '
'(855-720-2878)',
'data_breach': {'data_exfiltration': 'Possible (files accessed or acquired)',
'number_of_records_exposed': '2,664',
'personally_identifiable_information': True,
'sensitivity_of_data': 'High (includes SSN, financial, and '
'health insurance data)',
'type_of_data_compromised': 'Personally Identifiable '
'Information (PII)'},
'date_detected': '2025-01-26',
'date_publicly_disclosed': '2025-08-27',
'description': "Newk's Holding Company, the parent company of the Newk's "
'Eatery restaurant chain, experienced a data breach involving '
'unauthorized access to sensitive files. The breach '
'compromised personally identifiable information (PII) of at '
'least 2,664 individuals, including current and former '
'employees. The company responded by securing systems, '
'engaging third-party cybersecurity specialists, and offering '
'affected individuals 12 months of free credit monitoring and '
'identity protection services.',
'impact': {'data_compromised': ['Names',
'Addresses',
'Dates of birth',
'Social Security numbers',
"Driver's license or state ID copies",
'Health insurance information',
'Financial account information'],
'downtime': 'Network disruption (dates: 2025-01-19 to 2025-01-26)',
'identity_theft_risk': 'High (PII exposed)',
'payment_information_risk': 'Potential (financial account '
'information exposed)',
'systems_affected': 'Internal systems (specifics undisclosed)'},
'investigation_status': 'Completed (review concluded by 2025-08-27)',
'post_incident_analysis': {'corrective_actions': ['Secured compromised '
'systems',
'Engaged third-party '
'cybersecurity specialists',
'Offered 12 months of free '
'credit monitoring (Epiq - '
'Privacy Solutions)']},
'recommendations': ['Sign up for free credit monitoring and identity '
'protection services (Epiq - Privacy Solutions).',
'Monitor credit reports and financial accounts for '
'unusual activity.',
'Be alert for phishing attempts using exposed '
'information.',
'Consider placing a fraud alert or credit freeze with '
'major credit bureaus.'],
'references': [{'source': "Newk's Holding Company Breach Notification"},
{'source': "Maine Attorney General's Office Disclosure"}],
'regulatory_compliance': {'regulatory_notifications': 'Maine Attorney '
"General's office"},
'response': {'communication_strategy': ['Mail notifications sent to affected '
'individuals (2025-10-28)',
'Disclosure to Maine Attorney '
"General's office",
'Dedicated assistance line '
'established (855-720-2878, Mon-Fri 9 '
'a.m. to 9 p.m.)'],
'containment_measures': 'Secured compromised systems',
'incident_response_plan_activated': True,
'third_party_assistance': 'Cybersecurity specialists engaged'},
'threat_actor': 'Unauthorized actor',
'title': "Newk's Eatery Data Breach (2025)",
'type': 'Data Breach'}