Cyber Risks · Krebs on Security

There’s the Beef: Wendy’s Breach Numbers About to Get Much Meatier

Summary: Wendy's said its card breach is now expected to affect considerably more than the 300 franchised North American restaurants it first reported on May 11, 2016, after investigators found a second strain of point-of-sale malware targeting a different POS system. The company said attackers compromised remote access credentials used by third-party POS service providers, and spokesman Bob Bertini declined to say whether the intrusion is contained.

What's compelling: The breach surfaced in two waves because the first forensics sweep found only one malware strain, and the company's own investigators later found a variant at locations it had believed were unaffected - a reminder that a clean first-pass scan is not containment.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related