POS Malware Steals Checkers Drive-in restaurant Users Payment Card details

Malware

A security breach was disclosed by the Checkers and Rally’s Restaurants, Inc. that involved malware on point of sale terminals, which allowed hackers to steal payment data.

Checkers and rally restaurants operate in 28 states and is one of the largest two-star restaurants in the USA. The company runs almost 900 restaurants throughout the country.

According to the company investigation, malware has been detected in about 15 per cent of the points of sale systems in restaurants, and customer payment card data has been accessed by an unauthorized third party.

The malware was designed to collect the following payment card information including the name of the cardholder, the number of the payment card, the code of the card verification and the expiry date.

“We quickly hired leading data security experts after discovering the issue to conduct a comprehensive investigation and coordinate with affected restaurants and federal law enforcement authorities to address the issue.”

Of the 900 restaurants that are affected by the security breach, 102 can find a list of the affected locations and their estimated exposure dates can be found here.

Most of the affected restaurants on the list are from 2018 to 2019, some of them from 2017 and 2 from 2016.

“This issue has not affected all Checkers and Rally restaurants and not all guests who visited the affected restaurants during the relevant periods of time,” reads the report on the breach.

“Checkers encourage guests to review their account statements and immediately contact their financial institution or card issuer if an unauthorized charge is identified on their card.”

Mark Funk
Mark Funk is an experienced information security specialist who works with enterprises to mature and improve their enterprise security programs. Previously, he worked as a security news reporter.