California Pizza Kitchen Warns Employees of Personnel Data Breach

California Pizza Kitchen Warns Data Breach

California Pizza Kitchen informed 103,767 current and former employees on Monday (Nov. 15) that personal data the company held, including names and Social Security numbers, may have been accessed by digital intruders during a September cyberattack.

    Get the Full Story

    Complete the form to unlock this article and enjoy unlimited free access to all PYMNTS content — no additional logins required.

    yesSubscribe to our daily newsletter, PYMNTS Today.

    By completing this form, you agree to receive marketing communications from PYMNTS and to the sharing of your information with our sponsor, if applicable, in accordance with our Privacy Policy and Terms and Conditions.

    A draft letter from the company to employees, available on the California attorney general’s website, states that “on or about September 15, 2021, CPK learned of a disruption to certain systems on our computing environment.”

    The letter adds that California Pizza Kitchen secured its environment after discovering the disruption and “with the assistance of leading third-party computer forensic specialists, launched an investigation to determine the nature and scope of the incident. On October 4, 2021, the investigation confirmed that certain files on our systems had been subject to unauthorized access.

    “We therefore undertook a meticulous review of the potentially impacted files and our internal systems in order to identify the information that was involved and to whom it related,” the letter continues. “Unfortunately, on October 13, 2021, we determined that certain files containing your information could have been accessed during the event.”

    The notice adds that California Pizza Kitchen has informed law enforcement of the breach and has both reviewed and reinforced the security of its “computing environment.”

    The restaurant chain adds that it has implemented measures to avoid a similar incident in the future, including reviewing its security policies.

    Advertisement: Scroll to Continue

    In response to this breach, California Pizza Kitchen is offering current and former employees identity-theft protection including credit monitoring from Experian and identity-theft insurance.

    Details about the number of employees affected are contained in a publicly accessible form posted on the website of the Maine attorney general. The form states that the data was accessed via a computer hack.

    California Pizza Kitchen is based in Playa Vista, California, and has nearly 200 restaurants globally. The company was taken private in 2011 and is owned by an affiliate of Golden Gate Capital.