RB American Group LLC data breach

Clerk's notes

RB American Group LLC, a prominent franchisee operating within the restaurant and hospitality sector, formally reported a data breach to the Washington Attorney General on August 28, 2026. The company indicated an unspecified cybersecurity incident led to unauthorized access to its digital infrastructure. This matter is currently under monitoring status, signifying ongoing review of the incident's full scope and impact.

The compromised data stemming from this incident includes critical personal details such as Full Name, Social Security Number, Date of Birth, Wage and Compensation Information, Tax Return Information, Direct Deposit Account Details, Home Address, and Telephone Number. This collection of data is typically maintained within human resources databases, payroll systems, and administrative files for employees.

Exposure of this sensitive information creates substantial risks for affected individuals. Bad actors could exploit a combination of Social Security Number, Date of Birth, and employment details to commit sophisticated identity theft, file fraudulent tax returns, or open new lines of credit in victims' names. Direct Deposit Account Details also make individuals vulnerable to unauthorized financial transactions.

Under Washington state data protection laws, RB American Group LLC had a legal obligation to implement robust security measures to safeguard this sensitive data. The occurrence of this data breach suggests a potential failure to maintain adequate administrative, physical, and technical safeguards against cyber threats, indicating possible negligence in protecting employee privacy.

If you received an official data breach notification letter from RB American Group LLC, it confirms that your personal information was compromised. Receiving this notice establishes your standing to participate in a class action lawsuit aimed at holding the company accountable. You do not need to wait for actual financial loss to pursue legal action; the increased risk of future harm and the need for credit monitoring are recognized damages. We investigate these matters on a contingency fee basis, meaning you pay no out-of-pocket costs unless we secure compensation for you. We invite you to request a free case review to understand your options.

If a notification letter about this breach reached you, see every Washington data breach on file or browse all cases.