Slashdot Mirror
Wendy's Says More Than 1,000 Restaurants Affected By Hack (go.com)
An anonymous reader writes from a report via ABC News: The fast food giant Wendy's has reported today that hackers were able to steal customers' credit and debit card information at 1,025 of its U.S. restaurants. The company said Thursday hackers were able to obtain card numbers, names, expiration dates and codes on the card, beginning in late fall. Some customers' cards were used to make fraudulent purchases at other stores. Wendy's first announced it was investigating a possible hack in January. In May, it found malware in fewer than 300 restaurants; two types of malware were found two months later and the number of restaurants affected was "considerably higher." There are more than 5,700 Wendy's restaurants in the U.S. Customers can check to see which locations were affected via Wendy's website. The company said it is offering free one-year credit monitoring to people who paid with a card at any of those restaurants. In May, Wendy's announced plans to start automating all of its restaurants with self-service ordering kiosks.
WaReZ da B33F!!
Now, if you'll excuse me, I have backups to corrupt.
Why do any of these companies store your CC information? Surely it's only needed to authorize the transaction, do they need it for more than that?
There is no evidence they were storing your CC information. The POS system was infected with malware that skimmed it from the system when you swiped the card.
The malware was persistently installed over several months, so it got a lot of people. It wasn't a quick hack where someone went in, grabbed a database, and got out.
I wonder if credit monitoring companies secretly fund these hacks.