Confirmed breach

FAT Brands data breach

USUnited States · FAT Brands, Inc.

FAT Brands (United States) notified the Vermont Attorney General of a data breach on 11 November 2026. It told that state about 7 Vermont residents; the total can be higher.

People affected: 7Vermont residents · one state’s count, the total can be higher
Reported: 11 November 2026Official notice

What was exposed 4

Social Security numbers
Government ID numbers
Health and medical information
Financial account and card details

Before the notice: the ransomware gang DragonForce named FAT Brands on its leak site on 27 April 2026, 198 days before this was reported. Matched by the organisation’s name: the notice itself does not say who the attacker was.

Sources 1

Official noticeVermont Attorney General11 November 2026 · 7 Vermont residents

Official notices are read by code from the regulator’s own register. More notices to Vermont. · Corrections and changes

If FAT Brands had your data

Look for FAT Brands, Inc.’s own notice or letter: it should say what of yours was involved. Keep it.
Call your bank on the number printed on your card (never one from a message), check recent payments and ask for a new card.
An ID number cannot be changed, so lock it: a credit freeze or fraud alert in the US, a credit warning (kreditadvarsel) on borger.dk in Denmark, Cifas protective registration in the UK.
Check your health insurer’s statements for treatment you never had.
Expect scams that use your details: calls, texts or emails pretending to be FAT Brands, Inc., your bank or the police. Never give codes or passwords, never approve a sign-in you did not start, never move money.

Use FAT Brands? Hear first next time

Breach Radar tells you when a company you use is breached, and what to do. Free, and your list stays on your phone.

Download on the App Store

Questions about the FAT Brands breach

Was FAT Brands hacked?

FAT Brands (United States) notified the Vermont Attorney General of a data breach on 11 November 2026. It told that state about 7 Vermont residents; the total can be higher. The sources do not say how it happened.

What data was exposed in the FAT Brands breach?

Social Security numbers, Government ID numbers, Health and medical information and Financial account and card details, by the notices and reports on this page.

How do I know if I was affected?

Organisations normally tell the people whose data was involved, by letter or email, and that notice says what of yours was in it. We cannot look up individual people. If you got a notice, check that it is real, then follow the steps on this page.

Is there a FAT Brands data breach settlement?

No settlement open for claims is on record for FAT Brands as of 15 November 2026. A settlement usually comes a year or more after a breach, if a court approves one. Every open settlement is listed with its deadline.

Is a letter, email or text about the FAT Brands breach real or a scam?

A real notice names the breach, says what data was involved and never asks for a password, a code or a payment. Criminals often send fake notices after a breach is in the news. Do not use links or phone numbers in the message: go to FAT Brands’s own site, or check the letter here.

More breaches in United States

Every breach in United States →

Data breach settlements open for claims

Not about FAT Brands: settlements over other US data breaches that people can still claim money from.

Vasindas’ Around The Clock Care file by 23 November 2026
Innovative Renal Care file by 21 December 2026
Blue Ridge Rural Water Company file by 14 January 2027

Every open settlement →

From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Official registers · Corrections and changes · Accuracy audit · For journalists · Found a mistake? Tell us and we correct it.