Forest Global Training Partners

Cyber Risks · Krebs on Security

Wendy’s: Breach Affected 5% of Restaurants

Summary: Wendy's disclosed in its first quarter financial statement that malware installed through compromised third-party vendor credentials affected one point-of-sale system at fewer than 300 of approximately 5,500 franchised North America restaurants, starting in the fall of 2015. The company said the malware has been disabled and eradicated at affected locations, that its Aloha POS system was not impacted, and that roughly 50 franchise restaurants are suspected of or found to have unrelated cybersecurity issues.

Key Takeaway: Bank and credit union sources cited in the article say some breached Wendy's locations were still leaking card data as late as the end of March 2016 and into early April, with Visa CAMS giving an exposure period of August 31, 2015 to April 1, 2016 - a duration that outlasted the company's public accounting of the incident.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related