Exploit: Data Breach, Hacking
Company: California Pizza Kitchen
Industry: Food & Beverage, Restaurant
Sources: https://apps.web.maine.gov/online/aeviewer/ME/40/ea812f00-c605-4b8e-a6e2-9dd53169b256.shtml, https://ca.finance.yahoo.com/news/california-pizza-kitchen-spills-over-155906529.html

The popular California style pizza chain California Pizza Kitchen revealed that unauthorized access to their IT systems in September has led to a security breach impacting current and past employees. While the restaurant chain did not reveal the amount of data exposed in the breach, reports show that threat actors were able to access employee records that included names, Social Security Numbers, and potentially more PII.

California Pizza Kitchen has reported a breach notification to the Main Attorney General’s Office declaring 103,767 current and former employees were impacted by the incident.

Company officials have responded by saying, “Information security is among our highest priorities, and we have strict security measures in place to protect information in our care.” The statement continued by saying they “immediately took steps to review and reinforce the security of our computing environment. We are reviewing existing security policies and have implemented additional measures to further protect against similar incidents moving forward.”

Although it appears the company has internally acted with a quick response, it remains unclear why it took so long for the organization to file the breach notification.