Bell American Group Data Breach Exposes SSNs and Medical Records

Bell American Group LLC, a Taco Bell franchise operator based in Indianapolis, Indiana, disclosed a data breach that may have exposed sensitive personal information.

The company is one of the largest Taco Bell franchisees in the United States and is part of Flynn Restaurant Group. Notably, the Apple American Group, the Hut American Group and the Pan American Group reported data breaches, although it remains unclear if the incidents are connected.

The breach was reported to the Massachusetts Office of Consumer Affairs and Business Regulation on Aug. 26, 2026. The company mailed affected consumers notification letters on Aug. 26, 2026.

Bell American Group identified an event that may have impacted the privacy of certain personal information. The notification did not include specific dates for when the incident occurred or when it was first detected.

The types of personal information involved in the breach included Social Security numbers, medical records, financial account information, driver's license numbers and credit or debit card numbers.

Bell American Group's response to the breach

Bell American Group is offering affected individuals immediate access to 24 months of free credit monitoring and identity theft protection services through TransUnion.

Affected individuals can enroll in the monitoring services by visiting the Cyberscout activation page and entering the unique code included in their notification letter. Enrollment must be completed within 90 days of the date of the letter.

Bell American Group has set up a dedicated assistance line available Monday through Friday from 8:00 a.m. to 8:00 p.m. EST, excluding U.S. holidays.

Affected individuals may also contact the company by writing to Bell American Group LLC at Attn: Legal Department, 6200 Oak Tree Blvd., Suite 250, Independence, OH 44131, or by calling 216-525-2775.