Almeida Law Group is investigating a data breach at Wend America Group LLC. If you were affected, contact Almeida Law Group.
About Wend America Group LLC
Wend America Group LLC (also styled Wend American Group LLC) is a wholly owned subsidiary of Flynn Restaurant Group, one of the largest franchise operators in the United States. The entity owns and operates approximately 190 Wendy’s fast-food restaurant franchise locations across the District of Columbia, Maryland, Pennsylvania, Utah, Virginia, and West Virginia. Flynn Restaurant Group is headquartered in Independence, Ohio, and operates roughly 2,600 locations across multiple restaurant and fitness brands through separate corporate entities. The subsidiary president is Rasheeda Clark.
What Happened?
Wend America Group LLC was listed in a Vermont Attorney General breach report summary dated September 1st, 2026. The filing identifies the organization as a hospitality company and reports that the following categories of information were involved: Social Security Numbers, Government ID Numbers, Financial Account Codes, Credit and Debit Card Account Info, Health Records, and Biometric Information. The total number of affected persons and the notification date were not specified in the Vermont AG summary.
This breach appears to be part of a broader incident affecting Flynn Restaurant Group’s shared back-office systems. Supplemental research indicates that at least four sibling Flynn Group entities — Apple American Group LLC (Applebee’s/IHOP), HUT American Group LLC (Pizza Hut), Pan American Group LLC (Panera Bread), and Bell American Group LLC (Taco Bell) — have confirmed substantially identical intrusions involving unauthorized access to company servers on April 8th and 9th, 2026, with employee personal information accessed or acquired. All of those notices were sent from the same Independence, Ohio corporate address, strongly suggesting a single incident affecting Flynn Group’s shared infrastructure. The Vermont AG filing dated September 1st, 2026 appears to be among the first public regulatory disclosures specifically naming Wend America Group LLC. No ransomware group has been publicly linked to this incident, and no class action has been filed specifically against Wend America Group LLC, though plaintiff law firms including Emery | Reddy and Shamis & Gentile are investigating the broader Flynn Group breach across sibling entities.
Key Facts at a Glance
- Company or Organization: Wend America Group LLC
- Industry: Hospitality / Restaurants (Fast-Food Franchise Operator — Wendy’s)
- Location: 6200 Oak Tree Boulevard, Independence, OH 44131 (Flynn Group corporate address)
- Incident type: Unauthorized access to company servers; employee personal information accessed or acquired
- Date of breach: April 8th–9th, 2026 (based on matching notices filed by sibling Flynn Group entities; not yet independently confirmed in a Wend America Group–specific notice)
- Date breach discovered: September 1st, 2026 (Vermont AG report date)
- Prior breach: No prior breach specific to Wend America Group LLC found; multiple sibling Flynn Group entities confirmed breaches from the same approximate timeframe
- Litigation status: No class action filed specifically against Wend America Group LLC; plaintiff firms are investigating the broader Flynn Group breach
- Source: Vermont Attorney General — Security Breach Notices; Emery | Reddy — Flynn Group Data Breach; Cybernews — Pan American Group data breach; Class Action U — HUT American Group Data Breach; ClaimDepot — Pan American Group Data Breach
What Should You Do?
If you believe you were affected by this breach, take immediate steps to protect yourself. Review any identity theft protection enrollment offer you may receive from Wend America Group LLC and enroll before any stated deadline. Place a fraud alert or credit freeze with the three major credit bureaus — Equifax, Experian, and TransUnion — to help prevent new accounts from being opened in your name. Monitor your financial accounts and credit reports closely for unfamiliar activity, and request your free annual credit reports at AnnualCreditReport.com. Because health records were listed among the exposed data categories, also review any Explanation of Benefits statements from your health insurer and check your medical records for services you did not receive. If you detect suspicious activity, visit IdentityTheft.gov for step-by-step guidance on what to do next.
Your Legal Rights
If your personal or health information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.
