Menu
US Wendy's hack was bigger than thought and exposed credit card data

US Wendy's hack was bigger than thought and exposed credit card data

The company has published a list of the affected restaurants

A data breach that hit Wendy's fast food restaurants was more than three times bigger than originally disclosed and exposed customer credit card data.

The company said Thursday that malware installed in point-of-sale systems was discovered at over 1,000 of its franchised U.S. restaurants -- a big jump from the "fewer than 300 stores" it said in May had been affected.

Hackers gained access to the machines using remote access credentials of a third-party service provider, Wendy’s said.

The breach began in fall 2015 and wasn't discovered until early this year. As part of its investigation, the company discovered a second malware variant had infected its systems.

That second malware targeted "cardholder name, credit or debit card number, expiration date, cardholder verification value, and service code," the company said.

The restaurants affected were all franchise operations and are listed on a website. Wendy's said it's owned and operated restaurants do not appear to have been exposed to the same malware.

The company is one of the latest U.S. brands to have been hit by similar cyber attacks. In recent years, hackers pulled off data breaches against Target and Home Depot, also using login credentials from third-parties.

Hacking attacks against point-of-sale systems, especially at retailers, have become all too common, said Ziv Mador, vice president of security research at Trustwave.

Many of these attacks are conducted by stealing the login credentials used in company web interfaces designed to maintain the point-of-sale systems, he said. Once access is gained, a hacker can easily deliver malware disguised as a security patch.

Retailers tend to reuse the login credentials across their stores, so it can be easy for the hackers to expand their attack, Mador said.

Wendy's is encouraging customers to look out for unauthorized charges on their credit cards.

Follow Us

Join the New Zealand Reseller News newsletter!

Error: Please check your email address.

Slideshows

IN PICTURES: Ingram Micro Innovation hits Auckland with Hewlett Packard Enterprise

IN PICTURES: Ingram Micro Innovation hits Auckland with Hewlett Packard Enterprise

Ingram Micro completed its nationwide roadshow in Auckland last month, kicking off its Innovation Hour series with Hewlett Packard Enterprise. Uncovering the latest in storage, networking and servers, the event outlined key market trends for resellers in 2016 and beyond.

IN PICTURES: Ingram Micro Innovation hits Auckland with Hewlett Packard Enterprise
IN PICTURES: FireEye celebrates channel at 2016 Partner Conference

IN PICTURES: FireEye celebrates channel at 2016 Partner Conference

FireEye welcomed 143 channel partners and distributors to FireEye's 2016 annual Partner Conference, FireEye A/NZ Momentum - held at Establishment in Sydney. Delegates heard from senior trans-Tasman channel leaders, marketing and the product divisions in the morning, with FireEye customers, incident responders and threat intelligence analysts sharing knowledge during the afternoon.

IN PICTURES: FireEye celebrates channel at 2016 Partner Conference
​IN PICTURES: Disruption in the data centre - Can the Kiwi channel capitalise?​

​IN PICTURES: Disruption in the data centre - Can the Kiwi channel capitalise?​

With New Zealand businesses now open to innovation, the industry sits on the cusp of significant disruption in the data centre. Driven by software-defined networking, the future of the data centre is fast becoming reality, as the channel seeks to keep up, keep innovating and keep growing. APC by Schneider Electric, Lenovo and key partners outlined how the channel can capitalise at The Grill restaurant in Auckland.

​IN PICTURES: Disruption in the data centre - Can the Kiwi channel capitalise?​
Show Comments