Almeida Law Group is investigating a data breach at Pan American Group LLC. The breach occurred on April 8th, 2026. If you were affected, contact Almeida Law Group.
About Pan American Group LLC
Pan American Group LLC is a wholly owned subsidiary of Flynn Group (formerly Flynn Restaurant Group LP) that owns and operates Panera Bread Bakery-Café franchise locations across eight states, with more than 130 cafés. Its support office is located in Independence, Ohio, and its parent company is headquartered in San Francisco, California. Flynn Group is the largest franchise operator in the world, running approximately 2,600 locations across brands including Applebee’s, Pizza Hut, Arby’s, Wendy’s, Taco Bell, Panera Bread, and Planet Fitness.
What Happened?
Pan American Group LLC was listed in a California Attorney General sample breach notice filed on August 24th, 2026. According to the notice, an unknown actor accessed certain company servers between April 8th, 2026, and April 9th, 2026, and accessed or acquired certain files during that window. Pan American Group became aware of the suspicious network activity on April 9th, 2026, and launched an investigation to determine the nature and scope of the activity. The notice states that the potentially impacted information related to individuals in connection with their employment at Pan American Group. The specific data types listed in the notice were redacted. Pan American Group is offering 12 months of complimentary credit monitoring and identity theft protection services through CyberScout, a TransUnion company.
It is worth noting that this incident is separate from the widely reported January 2026 Panera Bread corporate customer data breach attributed to the ShinyHunters group, which exposed approximately 5.1 million customer accounts, and from a March 2024 ransomware attack that disrupted Panera Bread’s corporate IT systems. Those prior incidents involved Panera Bread corporate infrastructure, not Pan American Group LLC’s own systems. No ransomware group has publicly claimed this April 2026 incident. The breach notice was sent approximately four and a half months after the activity was first detected, which may be relevant under state breach notification laws.
Key Facts at a Glance
- Company or Organization: Pan American Group LLC
- Industry: Restaurants / Restaurant Franchise Operations (Panera Bread franchisee)
- Location: 6200 Oak Tree Blvd, Suite 250, Independence, OH 44131
- Incident type: Unauthorized access to company servers; files accessed or acquired
- Date of breach: April 8th, 2026
- Date breach discovered: April 9th, 2026
- Date of consumer notification: August 24th, 2026
- Identity theft protection offered: 12 months of complimentary credit monitoring and identity theft protection through CyberScout (a TransUnion company)
- Prior breach: Panera Bread corporate experienced a March 2024 ransomware attack and a separate January 2026 customer data breach (both at the corporate/brand level, not specific to Pan American Group LLC)
- Source: California Attorney General sample breach notice; supplemental sources: qsrmagazine.com, en.wikipedia.org, bleepingcomputer.com
What Should You Do?
If you received a notice from Pan American Group LLC, you should enroll in the complimentary 12-month credit monitoring and identity theft protection offered through CyberScout before the enrollment deadline listed in your notice. Whether or not you enroll, consider placing a fraud alert or credit freeze with each of the three major credit bureaus — Equifax, Experian, and TransUnion — to make it harder for someone to open new accounts in your name. Monitor your financial accounts and credit reports closely for any unfamiliar activity. You are entitled to one free credit report annually from each bureau at AnnualCreditReport.com or by calling 1-877-322-8228. If you believe you have already been a victim of identity theft, visit IdentityTheft.gov for step-by-step recovery guidance.
Your Legal Rights
If your personal information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.
