Card Breach Announced at Chili's Restaurant Chain (bleepingcomputer.com)
Catalin Cimpanu, reporting for BleepingComputer: Malware has harvested payment card details from some Chili's restaurants, Brinker International, the company behind the restaurant chain announced on Friday. Brinker says it detected the malware on Friday, May 11, the same day it made the announcement. The company said it is still investigating the incident together with law enforcement and third-party forensic experts. Based on the current details it was able to gather, the company said the malware appears to have infected some of its payment systems from where it gathered credit or debit card numbers and cardholder names.
Solution ... don't eat at Chili's. It's not like you'll really miss crappy fake "Tex Mex" food heated in a microwave. If you really need this cr@p, pay with good, old-fashioned, cash or a pre-paid card.
data back
data back
data back
data back
data back
data back
(repeat)
Wouldn't it be easier just to report those that haven't been hacked yet?
Chili's has those stupid at-table tablet kiosks that allow you to order things and pay your bill yourself.
In the current climate of card skimming devices being installed by criminals at ATMs and gas pumps -- consider that.
A portable, wireless, card reading device that is being left unsupervised for long periods of time, and the customer is being encouraged to use by the staff.
That they announced so quickly, unlike many others. That's probably because all those others were justifiably blasted.
Never remember any data leaks under Obama, so this is the Republican's fault.
I only ever get cash out of ATMs physically located inside banks and i thoroughly check for tampering every single time.
It is far too easy to skim cards by replacing/modifying/hacking card readers. There have been numerous cases of people in overalls and clipboards simply walking into establishments and replacing or stealing things without a single person questioning them. Do you really think Sally 6-dollars-an-hour is going to question 2 official looking guys who say they need to do an upgrade on the card readers or the place will have to stop accepting cards and lose thousands in lost sales? Fuck no.
Stop paying for shit with cards until they can come up with a more secure method or this is just going to continue to happen until you get pwned and reconsider your judicious use of cards.
Ass Breach Announced at Chili's Restaurant - affecting everyone who has ever eaten there.
It's like a Southwestern Applebees. All the food still comes off a Sysco truck. You'll do better at Taco Bell for price/performance and also volcanic flatulence.
Alternative Right.
Had Chili's managers attended Trump University there would have had the skills necessary to prevent these breeches.
Shouldn't affect all the tofu dick soy boys at Slashdot. Wake them when there's a breach at "Miranda's House of Vegan Soy".
Try paying with cash sometime, you'll get less identity theft.
Kids these days.
This. Credit card problems didn't happen under Obama.
I don't like it when companies spend months before making an announcement, but making a public announcement the SAME DAY it's first discovered is surprising. It takes time to investigate and see if it's only an attacker in a certain city hitting nearby restaurants (such as over their wifi on no-table kiosks) or if it's very widespread. Chili's is a franchise, so there are many different companies running Chili's branded restaurants and they probably have separate payment systems.
It also takes time for the technical people, executives, lawyer, and PR people to talk and make sure the public statement says the right things - that it's accurate and doesn't unnecessarily implicate Chili's in something that may be just one franchisee, for example. Getting the statement out the same day it was discovered is surprising.
I'm glad to see they've already brought in third-party experts. In-house people may want to cover their own ass, or cover their friend's ass, or likely simply don't specialize in computer forensics and investigations, so calling in third-party experts is a really good idea.
When your president says he could (and I quote) "go out in the street and kill anyone, it won't even hurt his chance of being elected", it fuels the nation with a certain amount of craziness that makes people think it's ok to steal CC numbers. So yes, entirely Republican fault, proven.
Did they hack the Pay at Table Tablets?
Chilis.....
I want my data back data back data back...
I want my data back data back data back...
after eating at Chili's ®, I breached their bathroom with explosive diarrhea. It was bad, I mean I didn't make it into the stall. Hell, I was dropping trou before I even made it into the bathroom (Imagine... being ticketed for indecent exposure was NOT be the worst thing that happened to me that night).
So I stumble into the bathroom, liquid shit pressing against my sphincter and... one stall is occupied (by a couple fags sucking each other off, no less) and the other is broken. I did what I had to do. I plopped my ass on the sink. A literal geyser of shit and farts exploded from my asshole. It just so happens that the shape of the bowl combined with the angle of my ass caused the stream of shit to ricochet and bounce up, coating the wall (not to mention my back). After 5 minutes of that, I looked like a victim of R Kelley's rape room.
But it got worse. The sink broke. so now I'm lying in the floor in a pool of my own shit with pieces of porcelain impaled in my asshole (which is now leaking blood AND shit. Fortunately, I hit my head and blacked out and didn't wake up until I was at the hospital, pumped full of morphine and saline.
Anyhow, don't order the shrimp fajitas. Just, don't.
Is that now the world knows you eat at Chilis
For patronizing these mega chain restaurants. I just have to laugh at the people that consider these places a "date night". If someone wanted to take me on a date to one of these places i would suddenly "become sick" come the night of the date and likely never speak to them again. You're basically eating McDonalds that is brought out to you by a server. Most of the food is just prepackaged crap run though a microwave or one of those industrial quick heating ovens. It's probably EXACTLY the same packaged stuff you can buy from these chains in grocery stores, just instead packaged in huge non descript brown boxes with multiple servings in each.
Support your local mom and pop restaurants!
After writing that, it occurred to me that the one time I had to make a "similar" announcement, I did so on the same day it was discovered. That was a much, much smaller company than Chili's, though, with much simpler systems.
In our our case, investigation lead to the conclusion that there probably was no leak of data, but because we saw something that raises eyebrows we notified customers. We suggested that they keep an eye on their credit card statements over the next days and weeks and let us know if they saw any questionable charges.
Which reminds me, there is something in the Chili's same-day announcement which could have been done better. The apparent leak was credit card numbers, not social security numbers. Yet Chili's suggested customers monitor their credit reports and file a fraud flag with the credit reporting agencies. That's the wrong course of action. Those things might make sense if your SSN was leaked. For a leaked CC number, the right thing to do is watch that credit card account. Bad guys use your CC number to make fraudulent charges in the CC, not to open new accounts.
with BBQ Sauce..
News @ 11
And people think cryptocurrency is insecure!
Come on Millennials, hurry up and kill this restaurant already!
Every week there is at least one report like this one of a data breach of electronic payment systems -- which is why I've been paying cash for everything I do in-person for more than a year now, to reduce the chances of getting my banking information stolen in one of these breaches.
Nervous Nellies, Doomsayers, and Chicken-Littles need not comment; I don't care about all your pants-peeing nightmare scenarios about some masked stranger robbing me, heard it all before, literally don't give a fuck, don't waste your time. Similarly, I don't need or want anyone's 'advice' on how to 'keep myself safe' while still using plastic. I'm perfectly happy doing things the way I'm doing them.
The day that they actually manage to properly secure electronic payment systems to the point where breaches are rare or never happen will be the day I re-think my cash-only policy. Until that day comes this is so far as I'm concerned the best way to prevent being compromised in a payment system breach, and I furthermore encourage others to adopt a cash-whenever-possible policy themselves.