Menu
US Wendy's hack was bigger than thought and exposed credit card data

US Wendy's hack was bigger than thought and exposed credit card data

The company has published a list of the affected restaurants

A data breach that hit Wendy's fast food restaurants was more than three times bigger than originally disclosed and exposed customer credit card data.

The company said Thursday that malware installed in point-of-sale systems was discovered at over 1,000 of its franchised U.S. restaurants -- a big jump from the "fewer than 300 stores" it said in May had been affected.

Hackers gained access to the machines using remote access credentials of a third-party service provider, Wendy’s said.

The breach began in fall 2015 and wasn't discovered until early this year. As part of its investigation, the company discovered a second malware variant had infected its systems.

That second malware targeted "cardholder name, credit or debit card number, expiration date, cardholder verification value, and service code," the company said.

The restaurants affected were all franchise operations and are listed on a website. Wendy's said it's owned and operated restaurants do not appear to have been exposed to the same malware.

The company is one of the latest U.S. brands to have been hit by similar cyber attacks. In recent years, hackers pulled off data breaches against Target and Home Depot, also using login credentials from third-parties.

Hacking attacks against point-of-sale systems, especially at retailers, have become all too common, said Ziv Mador, vice president of security research at Trustwave.

Many of these attacks are conducted by stealing the login credentials used in company web interfaces designed to maintain the point-of-sale systems, he said. Once access is gained, a hacker can easily deliver malware disguised as a security patch.

Retailers tend to reuse the login credentials across their stores, so it can be easy for the hackers to expand their attack, Mador said.

Wendy's is encouraging customers to look out for unauthorized charges on their credit cards.

Subscribe here for up-to-date channel news

Follow Us

Join the New Zealand Reseller News newsletter!

Error: Please check your email address.

Featured

Slideshows

StorageCraft celebrates high achievers at its inaugural A/NZ Partner Awards

StorageCraft celebrates high achievers at its inaugural A/NZ Partner Awards

Revealed at a glitzy bash in Sydney at the Ivy Penthouse, the first StorageCraft Partner Awards locally saw the vendor honour its top-performing partners with ASI Solutions, SMBiT Pro, Webroot, ACA Pacific and Soft Solutions New Zealand taking home the top awards. Photos by Maria Stefina.

StorageCraft celebrates high achievers at its inaugural A/NZ Partner Awards
Kiwi resellers make a splash on Synnex and Lenovo RotoVegas road trip

Kiwi resellers make a splash on Synnex and Lenovo RotoVegas road trip

​Synnex and Lenovo hosted 18 resellers for an action-packed weekend adventure in RotoVegas, taking in white water rafting on the Kaituna River, as well as quad biking and dinner at Stratosfare​, overlooking Lake Rotorua at the top of Mount Ngongotaha​. Photos by Synnex.

Kiwi resellers make a splash on Synnex and Lenovo RotoVegas road trip
Show Comments