Forest Global Training Partners

Cyber Risks · Krebs on Security

A Month After 2 Million Customer Cards Sold Online, Buca di Beppo Parent Admits Breach

Summary: Earl Enterprises, the Orlando-based parent of Buca di Beppo, Earl of Sandwich and Planet Hollywood, said malware on its point-of-sale systems captured card data from customers between May 23, 2018 and March 18, 2019, a 10-month breach. The disclosure came after KrebsOnSecurity contacted Buca di Beppo on Feb. 21, 2019, following the Feb. 20 posting of some 2.15 million stolen cards as the "Davinci Breach" on the carding site Joker's Stash, and the company's own lookup page indicates virtually all 67 Buca di Beppo U.S. locations were affected, along with some Earl of Sandwich sites and Planet Hollywood locations in Las Vegas, New York City and Orlando.

What's compelling: The cards were already for sale on Joker's Stash a month before the company acknowledged the breach, and Earl Enterprises did not answer questions about how many customers in total were affected across the 10 months malware sat on its POS systems.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related