2024 Bojangles — employee PII downloaded Feb 19–Mar 12; NC class action advances (2026)
Data compromised
Per company notice: personal and financial information of certain current and former employees; customer data not indicated as impacted. State lawsuit summarized by Charlotte Observer / DataBreaches.net: >387,000 files / >290 GB including SSNs and other employee PII posted on dark web. Nationwide employee count not published in company notice.
Technical writeup
Verified company notice (2024) with 2026 litigation update. Bojangles’ Restaurants, Inc. said it identified suspicious activity on its corporate network March 12, 2024; investigation found an unknown actor viewed and downloaded certain files between February 19 and March 12, 2024. The company notified law enforcement and later said personal and financial information of certain current and former employees was involved, with no indication customer data was impacted. Media and lawsuits describe Russian cybercriminals obtaining more than 387,000 files / 290+ GB and posting employee SSNs and other PII on the dark web. After a federal case was dismissed, a North Carolina Business Court judge in 2026 allowed a renewed employee class action to proceed (Charlotte Observer / DataBreaches.net, July 2026). BreachHistory retains recordsAffected 0 pending an attested employee headcount.
Root cause
Unknown actor viewed and downloaded certain corporate-network files between February 19 and March 12, 2024 after suspicious activity identified March 12; litigation later linked incident to Russian cybercriminals posting employee data on the dark web
References
- https://www.bojangles.com/news-and-community/bojangles-provides-notice-of-data-security-event/
- https://databreaches.net/2026/07/07/bojangles-sued-again-by-workers-over-russian-hacker-data-breach-nc-judge-weighs-in/
- https://www.charlotteobserver.com/news/business/article316396941.html
- https://www.law360.com/articles/2495583
- https://www.wsoctv.com/news/local/employees-suing-fast-food-chain-over-data-breach-will-have-their-case-heard/XTBMW73GR5DOZPH6RN6POSKNDE/