F500 Consumer Goods & Food · Food Services · Data breach
Darden Restaurants (Olive Garden, LongHorn)
Headline
Darden operates Olive Garden, LongHorn, Cheddar's, Yard House, Ruth's Chris and others under one parent with shared loyalty infrastructure, so a diner visiting what feel like different restaurants is building one…
Not independently verified. Verification status: Unverified - heuristic first draft. Publish state: draft unverified.
Darden operates Olive Garden, LongHorn, Cheddar's, Yard House, Ruth's Chris and others under one parent with shared loyalty infrastructure, so a diner visiting what feel like different restaurants is building one profile. Restaurant point-of-sale systems have historically been among the most breached in retail because multi-location operators run heterogeneous terminals with inconsistent patching and card data sits directly on the device. In August 2018 Darden disclosed that a cyberattack on Cheddar's Scratch Kitchen payment systems between Nov. 3, 2017 and Jan. 2, 2018 may have exposed about 567,000 payment cards at Cheddar's locations in 23 states (CBS News, Aug. 22, 2018).
- Severity
- Evidence tierUnassigned
- Claims confirmed
- Last verified2026-08-04
Primary source. None recorded — Unverified - heuristic first draft.
Terms
Arbitration
Not independently confirmed this pass — standard binding arbitration + class action waiver expected.
Data sharing
Beyond the 2018 Cheddar's payment-card breach (see headline), no specific named data-privacy lawsuit was confirmed this pass; recommend checking against the broader restaurant-industry Meta Pixel/tracking-technology and delivery-fee patterns documented extensively for Chick-fil-A, McDonald's, Panera, and others throughout this tracker.
Fees and billing
Not itemized this pass.
Contacts
Privacy contact. Not recorded.
Legal notice. Not verified this pass. If publicly traded: SEC Form 10-K cover page gives the official corporate address; the Secretary of State business-entity search in the state of incorporation gives the registered agent, which must accept service. If private: the state registered agent is usually the only reliable route.
Mailing address. Not recorded.
Evidence
No claims have been itemized for this row yet.
No sources are on file for this row yet.
Source vault
Link status: Candidate - not yet fetched
| Document | Last fetch | |
|---|---|---|
| Privacy policy darden.com/privacy-policy | Not fetched yet | NO (HTML only) |
| Terms of service darden.com/terms-of-use | Not fetched yet | NO (HTML only) |
| Website No URL recorded | Not fetched yet | — |
| Primary source No URL recorded Verification: Unverified - heuristic first draft | Not fetched yet | — |
Enforcement
No enforcement actions are linked to this row.
State statute
No HQ state on file, so no state statute applies by headquarters.