Fast-food restaurant chain Wendy’s has issued details on the specific outlets that may have been impacted in its recently reported data breach. The company is offering one year of free fraud consultation and identity restoration services for affected customers.

"We have conducted a rigorous investigation to understand what has occurred and apply those learnings to further strengthen our data security measures," said Wendy’s president and CEO Todd Penegor.

Wendy’s franchisee outlets were hit by malware in two waves beginning in late fall 2015. The first attack involved malware at point-of-sale (PoS) devices, and the second wave of attack involved an additional malware variant that targeted a separate PoS system and specific payment card information. None of the company-operated outlets appear to have been breached, says Wendy’s.

For more details, see Wendy's announcement here and here.