Panda Restaurant Group says March data breach compromised customers' personal information

Panda Restaurant Group said it experienced a data breach that compromised the sensitive personal information of individuals associated with the company.

 

Headquartered in Rosemead, California, Panda Restaurant Group, Inc. owns a number fast food brands in the U.S., including  Panda Inn, Raising Cane’s Chicken Fingers, Hibachi-San, and Panda Express, the largest Asian-American restaurant chain in the country.  

 

In a filing with the Maine and California state regulators this week, Panda group said that on March 10, it detected a data security incident that impacted certain corporate systems. The company launched an investigation, with assistance from external cyber security experts, to determine the nature and scope of the incident.

 

Panda Restaurant Group said it also took steps to secure the network and activated a remediation and recovery process to contain the incident.

 

“After a thorough investigation, we determined that certain information maintained on our corporate systems was accessed by the unauthorised actor between March 7-11, 2024. With the support of third-party experts, we then began a thorough review of the data affected to identify the specific information and individuals impacted,” reads the notice.

 

According to the company’s investigation, the compromised data included names and other personal identifiers in combination with driver’s license numbers and non-driver identification card numbers. the company is, however, yet to share the number of individuals affected by the security incident.

 

“We continue to work with law enforcement who are conducting an active investigation into the unauthorised actor responsible for this incident. Panda also implemented additional technical safeguards to further enhance the security of information in our possession and to help prevent similar events from happening in the future,” the company added.

 

While the company found no evidence of the compromised information being misused, it advised all affected individuals to regularly monitor their credit reports, account and benefit statements and report any suspicious activity to law enforcement authorities, including the police and state attorney general.

 

It has also offered complimentary identity protection and credit monitoring services through CyEx’s Identity Defence to all affected individuals.