Wend American Group Data Breach Exposes Financial and Health Records

Wend American Group LLC, a private franchise operator that owns and operates more than 190 Wendy's restaurants, disclosed a data breach. The company was founded in 2021 and is headquartered in Pittsburg, Kansas.

Wend American Group operates as part of Flynn Group's corporate structure and serves as the entity through which Flynn Group holds Wendy's restaurant assets previously acquired from NPC International. Notably, the Apple American Group, the Bell American Group and the Pan American Group reported data breaches, although it remains unclear if the incidents are connected.

The breach was disclosed to the Vermont Attorney General on Sept. 1, 2026.

The types of consumer information exposed in the breach included Social Security numbers, government identification numbers, financial account codes, credit and debit card account information, health records and biometric information.

The total number of individuals affected by the breach across the United States was not specified in the regulatory filing.

Wend American Group's response to the breach

Indivdiuals who believe they may have been affected should watch for direct communication from Wend American Group. Breach notification letters typically provide details about which personal data was compromised and include instructions for enrolling in any protective services the company may offer.