The security breach occurred between April 8 and April 9, 2026, when an unknown party infiltrated the company's network. While Apple American Group LLC and Apple American Group II, LLC reported the suspicious activity on April 9, affected individuals only began receiving formal notification letters on August 18, 2026. The company maintains that there is currently no evidence of identity theft or fraud resulting from the incident.

Edelson Lechtzin LLP is now seeking to determine the exact nature and extent of the compromised information. The firm is offering free case evaluations for those impacted, encouraging employees to monitor their credit reports and account statements closely. Potential claimants are advised to preserve all correspondence received from the company while the firm assesses the viability of a class action lawsuit against the restaurant operator.