The breach affects about 18 percent of the fast-food chain’s US locations.
Advertisement
The Dublin, Ohio, company first announced it was investigating a possible hack in January.
Fast-food chain Wendy’s (NASDAQ: WEN) in February this year reported “unusual payment card activity affecting some restaurants”, and in May confirmed the company found evidence of malware being installed in restaurants’ point-of-sales systems. The malware may have been deployed in late fall 2015.
Alabama restaurants include five in Huntsville; two in Madison, and one each in Cullman, Decatur, Evergreen, Greenville, Guntersville, Jasper, Mobile, Rainsville, Scottsboro and Selma. Very often, the hackers just guess at the usernames and passwords needed to remotely access point-of-sale devices.
Wendy’s Co. urged customers to check their accounts for any fraudulent purchases.
Three Wendys’ restaurants, one each in Monroe, Pike and Wayne counties, are on a list of franchises that may have been affected by a cyberattack that compromised credit and debit card information.
More lawsuits are likely to come.
Advertisement
Initially, the chain said about 300 stores were affected, but when the list was released more than 1,000 across the country were on the report. The company is offering a complimentary year of fraud consultation and identity restoration services to customers whose cards were affected by the hack. It’s nice to be missed; I took a few days off for a much-needed staycation and to visit with friends and family. But fear not: KrebsOnSecurity will be back in full swing next week!
