Newk's Data Breach Impacts Thousands

Newk's Holding Company, the parent company of the Newk's Eatery restaurant chain, experienced a data breach. A network disruption took place that blocked access to certain Newk's internal systems. An investigation determined that an unauthorized actor may have accessed or acquired sensitive files between Jan. 19, 2025 and Jan. 26, 2025.

A review took place and on Aug. 27, 2025 revealed that the cyberattack compromised personally identifiable information (PII) and and protected health information (PHI). According to a recent disclosure, exposed information included names, Social Security numbers, driver's license numbers, medical information, health insurance information and financial account information.

According to reports, the data breach impacted at least 2,664 individuals, which could include current and former Newk's employees. The company began notifying people involved in the data breach by mail on Oct. 28, 2025.

The data breach was also disclosed to the Maine Attorney General's office, the Texas Attorney General and the Massachusetts Attorney General between Oct. 28, 2025 and Oct. 30, 2025.

Newk's Holding Company's response

In response to the breach, Newk's took steps to secure compromised systems and engaged third-party cybersecurity specialists. The company is offering affected individuals 12 free months of Epiq - Privacy Solutions ID credit monitoring and identity protection services.

If you receive notice from Newk's about this breach, you may want to:

• Sign up for the free credit monitoring and identity protection services, offered by the company.
• Monitor your credit reports and financial accounts for any unusual activity.
• Be alert for phishing emails or phone calls that may use your exposed information.
• Consider placing a fraud alert or credit freeze with major credit bureaus.

Newk's Holding Company also established a dedicated assistance line for individuals with questions at 855- 720-2878, Monday through Friday 9 a.m. to 9 p.m.