Cici’s Pizza: Card Breach at 130+ Locations
Summary: Cici's Pizza, a Coppell, Texas-based fast-casual chain, acknowledged a credit card breach at more than 135 locations, disclosing it more than a month after KrebsOnSecurity first reported the intrusion. Cici's said it received reports in early March 2016 that point-of-sale systems were not working properly, that malware was found on some POS systems, and that it retained 403 Labs for forensic analysis; the company said the vast majority of intrusions began in March 2016 but the breach started as early as 2015 at some locations.
Bottom line: The fraudsters got in by tricking employees into installing card-stealing malware, and the same malware also intercepted private notes Cici's employees left for one another between shifts - the breach reached past card data into store operations.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026