FAT Brands, Inc. notified the Vermont Attorney General in November 2026 that a data breach exposed Social Security numbers, government ID numbers, financial account codes, credit and debit account information, and health records. The number of people affected has not been publicly disclosed. Affected individuals should freeze their credit and monitor financial and medical statements for fraud immediately.
| Company | FAT Brands, Inc. |
|---|---|
| Industry | Food Distribution |
| Data Types Exposed | Social Security Numbers, Government ID Numbers, Financial Account Codes, Credit and Debit Account Information, Health Records |
| People Affected | Not Publicly Disclosed |
| Attack Method | Unspecified/Unauthorized Access |
| Regulators Notified | Vermont Attorney General |
Were you affected by this breach?
You may be owed compensation.
Data breach victims can recover money for identity-theft losses, out-of-pocket costs, wasted time, and the ongoing risk of fraud — usually with no upfront cost, and no fee unless you win.
Check if you qualify — free reviewWhat Happened in the FAT Brands, Inc. Data Breach?
FAT Brands, Inc. recently confirmed a data breach that compromised sensitive personal information belonging to individuals connected to the company. The company disclosed the incident in a formal notification filed with the Vermont Attorney General. This filing confirmed that unauthorized parties gained access to a range of personal data.
The exact method used to breach FAT Brands’ systems has not been publicly disclosed. However, the notification confirms that sensitive information was accessed or acquired without authorization. As a result, the company moved to notify affected individuals and regulators about the scope of the exposure.
Because the breach discovery date has not been publicly disclosed, it remains unclear exactly when the intrusion began or how long attackers may have had access. FAT Brands filed its notification with the Vermont Attorney General in November 2026. In response, the company likely engaged forensic specialists to assess the scope of the compromise, though specific investigative details beyond the filing itself have not been made public.
Who was affected?
The FAT Brands data breach may affect current or former employees, customers, or other individuals whose information was stored in the company’s systems. The exact number of affected individuals has not been publicly disclosed. This means the full scope of the breach, in terms of total people impacted, remains unknown at this time.
Given the broad range of data categories involved, including health records and government-issued identification numbers, the affected population could span multiple groups. For example, this may include workers whose payroll or benefits information was stored electronically. It could also include customers who provided financial details for transactions. Because FAT Brands operates across the United States, the geographic reach of this breach could be substantial.
What Information Was Potentially Exposed?
According to the breach notification filed with Vermont’s Attorney General, several categories of sensitive personal data were involved in this incident. This is a serious combination of information types, since it includes both financial and health-related data categories.
- Social Security Numbers
- Government ID Numbers
- Financial Account Codes
- Credit and Debit Account Information
- Health Records
The exposure of Social Security numbers and government ID numbers creates significant risk for identity theft. With this information, criminals can open new credit accounts, file fraudulent tax returns, or apply for loans in a victim’s name. Because these identifiers rarely change, the risk of misuse can persist for years after a breach occurs.
In addition, the exposure of financial account codes and credit or debit account information raises the risk of direct financial fraud. Thieves could use this data to make unauthorized purchases or drain existing accounts. The inclusion of health records in this breach also means some individuals may face risks related to medical identity theft, where someone uses stolen information to obtain medical services or prescriptions under another person’s name.
What is the company doing?
FAT Brands filed a formal data breach notification with the Vermont Attorney General in November 2026. This filing represents the company’s official acknowledgment of the incident and its scope. Through this process, FAT Brands disclosed the categories of data involved to state regulators, as required under breach notification laws.
Beyond the regulatory filing itself, specific remediation steps taken by FAT Brands have not been publicly detailed. Companies in similar situations typically take steps such as resetting credentials, strengthening network security, and offering credit monitoring to affected individuals. However, whether FAT Brands has taken these specific measures has not been confirmed in available public records. Affected individuals should watch for direct notification letters from the company, which often include details on any protective services being offered.
What Should Affected Individuals Do?
Monitor Your Credit Reports Regularly
Anyone potentially affected by this breach should begin checking their credit reports right away. You can request free copies from each of the three major credit bureaus through AnnualCreditReport.com. Doing this regularly helps you catch unfamiliar accounts or inquiries before they cause lasting damage.
Because Social Security numbers were involved in this breach, the risk of new account fraud is elevated. For this reason, consider spacing out your free credit report requests throughout the year instead of using them all at once. This way, you maintain ongoing visibility into your credit activity.
Consider a Credit Freeze or Fraud Alert
Given that Social Security numbers, government ID numbers, and financial account details were exposed, placing a credit freeze is a strong protective step. A freeze prevents new creditors from accessing your credit file, which makes it much harder for identity thieves to open accounts in your name. You can request a freeze directly through each credit bureau at no cost.
Alternatively, a fraud alert offers a lighter form of protection. It requires creditors to verify your identity before extending new credit. Because this breach involved such sensitive identifiers, many security experts recommend pairing a freeze with close account monitoring for the most thorough protection.
Watch for Medical Identity Theft
Since health records were part of the exposed data, affected individuals should review any medical statements or insurance explanations of benefits closely. Look for services or treatments you don’t recognize. This type of fraud can be harder to detect than financial fraud, since it doesn’t always show up on a standard credit report.
If you notice suspicious medical activity, contact your health insurance provider immediately. In addition, request a copy of your medical records to check for inaccuracies. Catching errors early can prevent complications with future insurance claims or medical treatment.
Stay Alert for Phishing Attempts
After a breach involving this much personal data, scammers often follow up with phishing emails or calls pretending to be from FAT Brands or related financial institutions. Be cautious of any message asking you to verify personal details or click on unfamiliar links. Legitimate companies rarely ask for sensitive information through email.
Instead, if you receive a suspicious message, contact the organization directly using a verified phone number or website. This simple step can prevent you from accidentally handing over additional information to criminals. Because this breach already exposed significant personal data, avoiding further exposure is especially important right now.
Consult a Data Breach Attorney
Given the sensitive nature of the data involved, affected individuals may want to speak with an attorney who focuses on data breach cases. A free consultation can help clarify whether you qualify for compensation. This is especially relevant given the exposure of Social Security numbers and health records.
Many law firms offer no-cost initial case evaluations for breach victims. As a result, reaching out carries little downside and could help you understand your legal options. An attorney can also help you track any class action developments related to this specific breach.
Get a Free Case Review
Tell us how this breach affected you. A data breach attorney will review your situation at no cost and with no obligation — it takes about two minutes.
More Information
View the public data breach notification listing from Vermont Attorney General