Original Article Text

Click to Toggle View

Golden Corral restaurant chain data breach impacts 183,000 people. The Golden Corral American restaurant chain disclosed a data breach after attackers behind an August cyberattack stole the personal information of over 180,000 people. Golden Corral offers an all-you-can-eat buffet and grill in 298 locations across 43 U.S. states and Puerto Rico (operations are temporarily suspended at 24 locations for undisclosed reasons). In a press release published today, the company said that attackers had access to its systems between August 11 and August 15 and stole the sensitive data of "current and former employees and beneficiaries." "On or about August 15, 2023, Golden Corral experienced a data security incident that caused a temporary disruption to our corporate operations," Golden Corral said. "Golden Corral notified federal law enforcement regarding the event. Golden Corral is also working to implement additional safeguards." After determining the scope of information in the potentially impacted files, Golden Corral located address information for all affected individuals on January 26, and it began sending breach notification letters on February 16. Although today's press release doesn't provide the number of people impacted by this data breach, Golden Corral revealed in a filing with Maine's Attorney General that 183,272 individuals had their data stolen in the attack. Golden Corral discovered while investigating the incident that the stolen information could include employee, dependent, and beneficiary names, Social Security numbers, financial account information, driver's license numbers, medical information, username and password, and health insurance information. "While Golden Corral is unaware of the misuse of any personal information impacted by this event, individuals are encouraged to remain vigilant against incidents of identity theft by reviewing account statements and explanations of benefits for unusual activity," the restaurant chain warned. "Any suspicious activity should be reported to the appropriate insurance company, health care provider, or financial institution." A Golden Corral spokesperson was not immediately available for comment when contacted by BleepingComputer earlier today.

Daily Brief Summary

DATA BREACH // Golden Corral Suffers Major Data Breach Affecting 183K Individuals

Golden Corral, a U.S. restaurant chain, disclosed a data breach impacting over 180,000 people after an August cyberattack.

Attackers had unauthorized access to the company's systems from August 11 to August 15, 2023, and exfiltrated personal data of employees and their beneficiaries.

Sensitive information compromised includes names, Social Security numbers, financial details, driver's license numbers, medical records, and health insurance information.

After the incident, Golden Corral contacted federal law enforcement and initiated measures to heighten security and prevent future breaches.

Notifications to affected individuals began on February 16, following a thorough investigation to ascertain the extent and nature of the stolen data.

The company has urged affected individuals to remain vigilant and report any suspicious activities to their insurance providers, health care providers, or financial institutions.

At the time of reporting, there is no statement from a Golden Corral spokesperson regarding additional details of the breach.