Wend American Group Data Breach Exposes Financial and Health Records

Wend American Group LLC, a private franchise operator that owns and operates more than 190 Wendy's restaurants, disclosed a data breach. The company was founded in 2021 and is headquartered in Pittsburg, Kansas.

Wend American Group operates as part of Flynn Group's corporate structure and serves as the entity through which Flynn Group holds Wendy's restaurant assets previously acquired from NPC International. Notably, the Apple American Group, the Bell American Group and the Pan American Group reported data breaches, although it remains unclear if the incidents are connected.

The breach was reported to the attorneys general of Massachusetts and Vermont on Sept. 1, 2026. Wend American Group began sending notification letters to affected individuals on Sept. 1, 2026.

The types of consumer information exposed in the breach included Social Security numbers, government identification numbers, financial account codes, credit and debit card account information, health records and biometric information.

Wend American Group's response to the breach

Wend American Group is offering affected individuals 24 months of free credit monitoring and identity theft protection services through Cyberscout.

To enroll in the free monitoring services, individuals must visit the Cyberscout activation portal and enter the unique code provided in their notification letter. Enrollment must be completed within 90 days of the date of the letter.

Individuals who have questions or need assistance can contact the company's dedicated assistance line, available Monday through Friday from 8:00 a.m. to 8:00 p.m. EST, excluding U.S. holidays. Affected individuals may also write to Wend American Group LLC, Attn: Legal Department, 6200 Oak Tree Blvd., Suite 250, Independence, OH 44131, or call 216-525-2775.