RB American Group LLC data breach
RB American Group LLC reported a data breach on August 28, 2026, to the Oregon Attorney General, with the incident occurring on April 8, 2026. The compromise may have exposed sensitive personal and financial data, and the investigation status is currently monitoring. Individuals who received a notification letter should understand the potential risks and their available options.
Docket sheet
- Company
- RB American Group LLC
- Venue
- Oregon Attorney General
- Filed
- August 28, 2026
- People affected
- Not stated
- Status
- Monitoring
Where this breach stands
- 1
Breach occurredApril 8, 2026
Date of the incident as stated in the filing.
- 2
Reported to the Oregon Attorney GeneralAugust 28, 2026
The company filed a breach notification with the state regulator.
- 3
Attorney reviewCurrent stage
Current status: Monitoring. Our office is reviewing whether affected people may have claims.
- 4
Your case review
Got a letter about this breach? Submit it for a free, confidential review.
Information listed in the filing
- Full Name
- Social Security Number
- Date of Birth
- Mailing Address
- Wage and Compensation Information
- Tax Return Information
- Direct Deposit Account Details
- Phone Number
Clerk's notes
RB American Group LLC, an entity operating within the hospitality and quick-service restaurant franchise ecosystem, filed a data breach notification with the Oregon Attorney General on August 28, 2026. This report concerns a data security incident that took place on April 8, 2026, where unauthorized actors may have gained access to internal network environments or hosted file repositories. The investigation into this breach is currently in a monitoring status.
The compromised data includes sensitive categories such as Full Name, Social Security Number, Date of Birth, Mailing Address, Wage and Compensation Information, Tax Return Information, Direct Deposit Account Details, and Phone Number. The exposure of these personal identifiers can lead to various forms of identity theft, financial fraud, and unauthorized access to personal or financial accounts, creating long-term risks for affected individuals.
Organizations like RB American Group LLC are bound by legal obligations to implement robust security measures to protect the personal information they collect and store. The occurrence of a widespread data breach suggests a potential failure in these security protocols, raising questions about whether the company met its duty to adequately safeguard private information from unauthorized disclosure.
If you have received a data breach notification letter from RB American Group LLC, this serves as official confirmation that your sensitive personal and financial data was compromised. Such a notification legally establishes your standing to participate in legal actions aimed at holding the company accountable for any potential security lapses that led to this incident.
Affected individuals do not necessarily need to prove that they have already suffered out-of-pocket financial losses to seek legal remedies. The increased risk of future identity theft and the inherent loss of data privacy are recognized as actionable harms. You can request a free review of your situation to understand your potential options, with no out-of-pocket costs.
If a notification letter about this breach reached you, see every Oregon data breach on file or browse all cases.
Other Oregon docket entries
- Photon HealthOregon AGOctober 21, 2026Monitoring
- Aldrich Services LLPOregon AGOctober 21, 2026Monitoring
- Roseburg Therapy dba Stronger OregonOregon AGOctober 19, 2026Monitoring
- The City of Mt. AngelOregon AGOctober 13, 2026Monitoring
- Mercadien P.C., CPAsOregon AGOctober 12, 2026Monitoring
- Blueberry PediatricsOregon AGOctober 10, 2026Monitoring
- AllCare Health, Inc.Oregon AGOctober 8, 2026Monitoring
- Hood River DentalOregon AGOctober 8, 2026Monitoring
Attorney advertising. A docket entry reflects a public regulator filing and our review status; it does not mean a lawsuit has been filed. Submitting a review request does not create an attorney-client relationship.