Banks: Card Breach at Some Chick-fil-A’s
Summary: Sources at several U.S. financial institutions traced a pattern of credit card fraud to accounts used at different Chick-fil-A restaurants, and one major card association issued an alert about a breach at an unnamed retailer lasting from Dec. 2, 2013 to Sept. 30, 2014. One bank said nearly 9,000 of its customer cards were listed in that alert, with the only common point of purchase being Chick-fil-A locations, concentrated in Georgia, Maryland, Pennsylvania, Texas and Virginia.
Bottom line: One bank reported more cards affected here than in the Target breach, and the compromise ran for roughly ten months before the alert went out - a reminder that point-of-sale malware can sit inside payment systems long enough to outlast several card reissuance cycles.
Read the original at Krebs on Security ↗
- Topics
- Cybercrime & Law Enforcement
- Related
- Gootloader Malware Disrupted After Infecting 25,000 Computers Cyber Risks · Nov 13, 2026354 dark web vendors and buyers arrested in Operation Tor Nado Cyber Risks · Nov 13, 2026Law Enforcement Disrupts Gootloader, CastleRAT, and StealC Infrastructure Cyber Risks · Nov 13, 2026