Wendy’s Credit Card Breach Worse Than Earlier Thought

Breach took place in two waves, cannot rule out there aren’t others, says the fast food chain.

Dark Reading Staff, Dark Reading

June 14, 2016

1 Min Read

The credit card breach at Wendy’s is likely to be way beyond the officially reported figure of “fewer than 300,” says KrebsOnSecurity, citing fraud and banking community sources. The fast food chain has confirmed it could be “significantly higher,” but declined to say whether the attack has been contained, indicating the intrusion may still be on.

The company had announced in May that 5% of its 5,800 stores were affected by the breach, but recently revised that figure, saying the breach happened in two parts. The first part involved malware at point-of-sale devices and the second part, it elaborates, was discovered later and involved a different strain or mutation of the original malware which targeted a separate point-of-sale system.

KrebsOnSecurity believes that, like Wendy’s, in most breaches involving hospitality, hackers remotely access payment data by exploiting remote management software for point-of-sale devices. Because of this, says Krebs, many retailers are now opting for card readers that are more secure.

Read the full story at KrebsOnSecurity

About the Author(s)

Dark Reading Staff

Dark Reading

Dark Reading is a leading cybersecurity media site.

Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.

You May Also Like

More Insights