Breach at Sonic Drive-In May Have Impacted Millions of Credit, Debit Cards
Summary: Sonic Drive-In, a chain with nearly 3,600 locations across 45 states, acknowledged a breach affecting an unknown number of store payment systems after KrebsOnSecurity traced a batch of some five million credit and debit cards offered for sale on Joker's Stash, first uploaded around Sept. 15, 2017, to Sonic customers. Two sources who bought cards from the batch found they had all been recently used at Sonic locations, and Sonic said its credit card processor flagged unusual activity the prior week.
What you should know: The cards are indexed by city, state and ZIP code so buyers can pick ones near them and dodge out-of-state fraud blocks, and with roughly 90 percent of Sonic locations franchised, the Wendy's precedent - more than a thousand locations and almost nine months of reissuing cards - is the cost sitting in front of card-issuing institutions.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026