Panda Restaurant Group, the parent company of Panda Express, Panda Inn, and Hibachi-San, disclosed a data breach after threat actors compromised its corporate systems in March and stole the personal information of an undisclosed number of associates.
Panda Express is the largest Chinese fast food chain in the United States, with over $3 billion in sales and 47,000 associates working in 2,300 branches.
The company discovered a data security breach on March 10, 2024, which affected some of its corporate systems but left in-store systems, operations, and guest experience unaffected.
According to a company spokesperson, the incident only impacted current and former associate data and no guest data was involved in the incident.
On being aware of the incident, Panda immediately secured its environment, activated remediation and recovery efforts, and initiated a thorough investigation in collaboration with third-party cybersecurity experts and law enforcement agencies to establish the nature and extent of the breach.
Based on the investigation it was determined that certain information maintained on its corporate systems was accessed by the unauthorized actor between March 7-11, 2024.
According to information filed with the Office of the Maine Attorney General, information exposed in the attack includes affected peoples’ names or other personal identifiers and their driver’s license numbers or non-driver identification card numbers.
However, the company has not yet disclosed the total number of individuals whose personal information was accessed or stolen in the incident.
Panda has implemented additional technical safeguards to further enhance the security of information in their possession and to help prevent similar events from happening in the future.
Comments