Shoney’s is the latest restaurant chain to face a credit card breach. Best American Hospitality Corp., a group that manages a handful of Shoney’s corporate-owned stores, released a statement detailing an investigation into stolen payment card information at 37 locations spread out throughout South Carolina, Tennessee, Louisiana, Georgia, Alabama, Mississippi, Virginia, Missouri, Florida, and Arkansas.
The company’s investigation found that malware was installed remotely on point of sale equipment that processes payment cards used at some of the restaurants. The malware searched for track data (cardholder name, card number, expiration date, and internal verification code) read from the magnetic stripe of a payment card as it was being routed through the affected computer, the statement explains.
Best American Hospitality Corp. hired Kroll Cyber Security to conduct the investigation. The company found that some of the units were subject to an initial data breach from December 27, 2016 until the malware was contained on March 6, 2017. The date of the first breach varies by location, the statement adds.
“In some instances, the malware appears to have identified data from the card’s magnetic stripe that included the cardholder name and number and in other instances the card data identified by the malware did not appear to include the cardholder name. It is possible that not every cardholder name was identified,” the statement reads.
The 70-year-old Shoney’s has around 150 company-owned and franchised locations in 17 states.
The breach was first reported by Krebs on Security. Hundreds of franchised Wendy’s restaurants were breached last year and Arby’s just released an update on a similar security incident Friday, saying that company-owned stores affected began no earlier than October 20, 2016 and ended no later than January 12, 2017. Read more about that incident here.
Here are the Shoney’s locations affected with the earliest date of breach posted:
2016-12-27 1307 North Main Street, Summerville, SC, 29483
2016-12-27 407 Thompson Lane, Nashville, TN, 37211
2016-12-27 791 North Second Street, Clarksville, TN 37040
2017-01-11 2225 Carmack Blvd, Columbia, TN, 38401
2017-01-11 880 South Jefferson Ave., Cookeville, TN 38501
2016-12-27 420 Westbank Expressway, Gretna, LA, 70053
2016-12-27 110 Interstate Drive, Nashville, TN, 37206
2016-12-27 365 White Bridge Pike, Nashville, TN, 37209
2016-12-27 1306 Hwy 96 East Franklin, TN, 37064
2016-12-27 2003 Memorial Blvd Springfield, TN, 37172
2016-12-27 546 Donelson Pike Nashville, TN, 37214
2017-01-11 1950 S. Church Street Murfreesboro, TN, 37130
2017-01-11 1302 West Walnut Avenue Dalton, GA, 30720
2017-01-11 2227 Woodward Avenue Muscle Shoals, AL, 35661
2016-12-27 6121 Highway 49 Hattiesburg, MS, 39401
2017-01-11 3313 Pemberton Square Blvd, Vicksburg, MS 39180
2016-12-27 312 S. 16th Avenue, Laurel, MS, 39440
2016-12-27 2645 McGavock Pike, Nashville, TN, 37214
2017-01-11 2124 North Locust Avenue, Lawrenceburg, TN, 38464
2016-12-27 307 Long Hollow Pike, Goodlettsville, TN, 37072
2016-12-27 3083 Wilma Rudolph Blvd., Clarksville, TN, 37040
2016-12-27 105 Kimball Crossing Dr Kimball, TN, 37347
2016-12-27 2673 Lee Highway Troutville, VA, 24175
2016-12-27 26 Sergeant Prentiss Drive, Natchez, MS, 39120
2017-01-11 500 Springridge Road., Clinton, MS, 39056
2016-12-27 415 W Interstate Drive, Jennings, LA, 70546
2016-12-27 1950 West Hwy 76, Branson, MO, 65616
2016-12-31 101 Bluefish Dr Suite 105, Panama City Beach, FL, 32413
2016-12-30 1805 North Kings Highway, Myrtle Beach, SC, 29577
2016-12-28 1206 South Kings Highway, Myrtle Beach, SC, 29577
2016-12-27 2318 Shallowford Village Dr, Chattanooga, TN, 37421
2017-01-11 222 W. Service Rd West Memphis, AR, 72301
2017-01-11 5829 Highway 70 (Summer Ave), Memphis, TN, 38134
2017-01-11 3081 Covington Pike, Memphis, TN, 38128
2017-01-09 2771 Highway 82, East Greenville, MS, 38703
2017-01-11 1526 Sunset Drive, Grenada, MS, 38901
2017-01-11 12204 S. Apopka Vineland Rd, Orlando, FL, 32836
Best American Hospitality Corp. also released some steps for guests to protect their information:
It is always advisable to remain vigilant to the possibility of fraud by reviewing your payment card statements for any unauthorized activity. You should immediately report any unauthorized charges to your card issuer because payment card rules generally provide that cardholders are not responsible for unauthorized charges reported in a timely manner. The phone number to call is usually on the back of your payment card. You should immediately report any unauthorized charges to your card issuer because payment card rules generally provide that cardholders are not responsible for unauthorized charges reported in a timely manner. The phone number to call is usually on the back of your payment card.