"Burger Chain Five Guys Discloses Data Breach Impacting Job Applicants"

US burger chain Five Guys has recently disclosed a data breach impacting job applicants, and the company may be facing a lawsuit over the cybersecurity incident.  Five Guys started informing employees on December 29, when it also notified state authorities about the incident.  The copies of the notification letters that were made public only mention the names and unspecified information that were impacted by the breach.  The information that was affected varies from one individual to another.  Little information is available about the incident itself.  Five Guys said it identified “unauthorized access to files on a file server” on September 17, 2022.  An investigation completed on December 8 showed that the exposed files contained information submitted to the company in connection with its employment process.  It’s unclear if the incident was part of a ransomware attack or if someone simply stumbled upon an unprotected cloud storage instance.  It’s unclear exactly how many people are impacted, but authorities in Massachusetts have been informed about 93 residents of the state being affected, and in Montana, about 12 individuals were impacted.  Five Guys has more than 1,700 locations and employs over 5,000 individuals worldwide.

SecurityWeek reports: "Burger Chain Five Guys Discloses Data Breach Impacting Job Applicants"