F500 Consumer Goods & Food · Food Services · Data breach
Yum Brands (KFC, Taco Bell, Pizza Hut)
Headline
The January 2023 ransomware attack forced Yum to close nearly 300 UK restaurants for a day, and the company later disclosed that employee data had been exposed as well - a scope revision after the initial assessment…
Not independently verified. Verification status: Unverified - heuristic first draft. Publish state: draft unverified.
The January 2023 ransomware attack forced Yum to close nearly 300 UK restaurants for a day, and the company later disclosed that employee data had been exposed as well - a scope revision after the initial assessment, which is the recurring pattern this tracker documents most sharply in the Aflac row (whose June 2025 incident was ultimately found to involve approximately 22.65 million individuals). Yum's brands run heavily franchised digital ordering, so customer data may sit with independent operators rather than the national brand.
- Severity
- Evidence tierUnassigned
- Claims confirmed
- Last verified2026-08-04
Primary source. None recorded — Unverified - heuristic first draft.
Terms
Arbitration
Not independently confirmed this pass — standard binding arbitration + class action waiver expected.
Data sharing
HISTORICAL CONFIRMED BREACH (Jan 2023): Yum Brands (parent of KFC, Taco Bell, and Pizza Hut) disclosed a ransomware attack that forced fewer than 300 UK restaurants to close for one day and exposed some employee data — an operationally disruptive incident distinct from a typical customer-data exposure.
Fees and billing
Not itemized this pass.
Contacts
Privacy contact. Not recorded.
Legal notice. Not verified this pass. If publicly traded: SEC Form 10-K cover page gives the official corporate address; the Secretary of State business-entity search in the state of incorporation gives the registered agent, which must accept service. If private: the state registered agent is usually the only reliable route.
Mailing address. Not recorded.
Evidence
No claims have been itemized for this row yet.
No sources are on file for this row yet.
Source vault
Link status: Candidate - not yet fetched
| Document | Last fetch | |
|---|---|---|
| Privacy policy yum.com/privacy-policy | Not fetched yet | NO (HTML only) |
| Terms of service yum.com/terms-of-use | Not fetched yet | NO (HTML only) |
| Website No URL recorded | Not fetched yet | — |
| Primary source No URL recorded Verification: Unverified - heuristic first draft | Not fetched yet | — |
Enforcement
No enforcement actions are linked to this row.
State statute
No HQ state on file, so no state statute applies by headquarters.