Newk's Holding Company, the parent company of the Newk's Eatery restaurant chain, suffered a data breach involving unauthorized access to its internal systems between January 19–26, 2025. The breach was discovered later, with an investigation confirming on August 27, 2025, that personally identifiable information (PII) of at least 2,664 individuals—including current and former employees—was compromised. Exposed data may include names, addresses, dates of birth, Social Security numbers, driver’s license/state ID copies, health insurance details, and financial account information. The breach caused a network disruption, blocking access to critical internal systems. While the full scope of the attack remains undisclosed, the company notified affected individuals via mail (starting October 28, 2025) and reported the incident to the Maine Attorney General’s office. In response, Newk’s secured compromised systems, engaged third-party cybersecurity experts, and offered 12 months of free credit monitoring and identity protection services to victims. A dedicated assistance line was also established to address concerns, though the long-term financial, reputational, and operational impacts remain uncertain.