Restaurant Management Company of Wichita data breach: 120,416 people after an October 2025 intrusion

What happened at Restaurant Management Company?

The letter gives the sequence. On October 13, 2025 the company detected suspicious activity, secured its systems and brought in cybersecurity experts. The investigation concluded that an unauthorized third party had gained access to a portion of its systems from October 4 to October 13, 2025. It hired a data-review firm to go through the affected files, got the results on February 12, 2026, and then worked out who needed notice and gathered current addresses. The letter does not say how the intruder got in or whether it was ransomware.

Date	What happened	Source
October 4, 2025	Start of unauthorized access; breach date in Indiana's record	Letter; Indiana report
October 13, 2025	Suspicious activity detected; access ends	Letter
February 12, 2026	Data-review firm returns its results	Letter
April 20, 2026	Notice sent, per Indiana	Indiana report

From detection to notice took 189 days, 67 of them after the review results came back. The notice-delay guide shows how that compares.

What information was exposed?

The letter says some combination of personal information was in the affected systems and leaves the list as a placeholder in the public copy, so this entry cannot say which data types were involved. The company offers Experian IdentityWorks credit monitoring to people who got a letter. Each recipient's letter is the record of what was involved for them.

How many people were affected?

120,416 in total, per Indiana's 2026 report, including 112 Indiana residents. That puts it among the 2026 notices of more than 100,000 people; the largest data breaches of 2026 lists the rest. The letter does not say whether the people affected are restaurant employees, guests or others.

Texas's attorney general lists a report from Restaurant Management Company of Wichita, Inc., posted on April 22, 2026, with 52,017 Texans affected. The Texas record lists names, addresses, Social Security numbers, driver's license numbers, other government ID numbers, financial account or card numbers, medical information, health insurance information and dates of birth among the information involved. Of the 607 reports Texas posted in 2026 up to November 10, it is the 55th largest by Texans affected; the Texas ranking has the largest. The figure counts Texans only.

What is the company offering people who got a letter?

A complimentary one- or two-year membership in Experian IdentityWorks, depending on the letter, with an activation code and enrollment deadline printed on each one. Enrollment is at the Experian IdentityWorks site, or by phone with Experian at 833-918-1109 using the engagement number on the letter. The company's own call center is 844-558-4513, Monday to Friday, 8:00 a.m. to 8:00 p.m. Central time. The guide to credit monitoring offers compares this offer with others in the log. Other hospitality operators with notices in the log include Magna Hospitality Group.

What the record leaves open

• Which types of personal information were in the files.
• Whether the people affected are employees, customers or both, and in which states.
• How the intruder got in.