Chick-Fil-A admits possible credit card breach
Chick-Fil-A is spending the beginning of 2015 not just serving chicken to hungry partygoers on their way home, but also dealing with a possible credit/debit card breach. The fast food chain has just issued an official statement admitting that it has "recently received reports of potential unusual activity involving payment cards used at a few of [its] restaurants." It says the company has been notified on December 19th of suspicious payment activities on cards used in some of their outlets, so it has begun investigating what happened with help from authorities and IT firms. This aligns with what security journalist Brian Krebs wrote in mid-December: according to the piece, the company has been receiving rather inconsistent reports of suspicious activities from banks since November.
It also revealed that a few days before Christmas, a major credit card company alerted banks about a breach that started in December 2013 and lasted until September 2014, although it didn't name the retailer. One of those banks told Krebs that the warning message included a list of 9,000 credit cards, with only Chick-Fil-A as the common point of purchase. "It's crazy," his source said, "because 9,000 customer cards is more than the total number of cards we had impacted in the Target breach."
While Chick-Fil-A has admitted that it could have been hacked, its statement still lacks pertinent details, citing the need for further investigation. Krebs believes only some outlets were affected, though, most likely via third-party point-of-sale systems, similar to what happened to Home Depot. The company hasn't determined yet whether customers' info were actually stolen, so it's probably wise to monitor your accounts if you've eaten at Chick-Fil-A since late 2013.
[Image credit: AFP/Getty Images]
