Pan America Group Discloses Network Breach Impacting Customer Data Pan America Group LLC, a subsidiary of Flynn Group which oversees major brands including Applebee’s, Arby’s, Wendy’s, Planet Fitness, Taco Bell, Pizza Hut, and Panera Bread reported a cybersecurity incident involving unauthorized access to its systems. The company detected suspicious network activity on April 9, 2026, prompting an immediate investigation. According to a notice filed with the California Department of Justice, an unknown threat actor accessed certain servers between April 8 and April 9, 2026, and exfiltrated files containing sensitive data. While the company confirmed that personal information may have been compromised, it did not disclose specifics about the affected data types in the filing. Pan America stated that no evidence of fraud or identity theft has been linked to the breach. In response, the company secured its systems, enhanced existing safeguards, and is offering complimentary identity monitoring services to impacted individuals. The method of intrusion and the identity of the threat actor remain undisclosed. Cybersecurity researchers have not observed any claims of responsibility for the attack. The incident follows earlier breaches this year involving Flynn Group brands, including claims by a threat actor known as ‘Eliasxy’, who advertised stolen datasets from Wendy’s UK and Burger King France on a dark web forum. However, no direct connection to the Pan America breach has been established.