[BreachExchange] 2 million credit card numbers stolen from Earl Enterprise restaurants in 10-month breach

Inga Goddijn inga at riskbasedsecurity.com
Mon Apr 1 09:24:22 EDT 2019


https://www.theverge.com/2019/3/31/18289488/data-breach-planet-hollywood-buca-di-beppo-mixology-earl-enterprises-cybersecurity

The parent company of restaurants such as Planet Hollywood, Buca di Beppo,
and Mixology has confirmed that it experienced a security breach after
security researchers found more than 2 million stolen credit card numbers
being sold online.

KrebsOnSecurity says
<https://krebsonsecurity.com/2019/03/a-month-after-2-million-customer-cards-sold-online-buca-di-beppo-parent-admits-breach/>
that
it contacted the company in February after it discovered “strong evidence”
that customer credit card and debit card numbers were being sold online.
Hackers used “malware installed on its point-of-sale systems” to steal 2.15
million credit and debit card numbers, expiration dates, and some
cardholder names from restaurant locations in 40 states.

Earl Enterprises says that the breach took place between May 23rd, 2018 and
March 18th, 2019, and that “the incident has now been contained.” The
breach impacted individual restaurant locations of Buca di Beppo, Earl of
Sandwich, Planet Hollywood, Chicken Guy!, Mixology, and Tequila Taqueria
outlets. The company has since launched a website
<https://www.earlenterprise.com/incident/#potentially-affected-locations> for
customers to check if a location they had visited was one of the ones that
was impacted. It also says that online orders were not impacted by the
breach.

The company recommends that customers examine their statements for
suspicious activity, and to notify their issuer if they find fraudulent
transactions.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.riskbasedsecurity.com/pipermail/breachexchange/attachments/20190401/4ed7e9f6/attachment.html>


More information about the BreachExchange mailing list