More than 160 Applebee restaurants in the US have been breached after discovering malware in its Point of Sale (POS) systems.
On March 2nd, RMH Franchise Holdings who operate 167 Applebee’s restaurants across the US confirmed that the malware was discovered in its Point of Sale (POS) system.
“Based on the experts’ investigation, RMH believes that unauthorized software placed on the point-of-sale system at certain RMH-owned and -operated Applebee’s restaurants were designed to capture payment card information and may have affected a limited number of purchases made at those locations,” said in the statement published by RMH.
The breach may have exposed details like Certain guests’ names, credit or debit card numbers, expiration dates and card verification codes processed during limited time periods.
Impact Period varies by location and in most of the cases it was from December 6, 2017, and January 2, 2018. In some case, the malware was active from November 23 or December 5. None of them happened to be affected after January 2nd, 2018.
RMH said that they discovered the breach on Feb 13 and took appropriate security measures to ensure that it had been contained.
The company advised customers to check their credit card and bank statements for any unusual activity. “If they see an unauthorized charge, guests should immediately notify the bank that issued the card. Payment card network rules generally state that cardholders are not responsible for such charges.”
Here below is the list RMH-owned Applebee’s restaurant affected in each states:
Alabama(2), Arizona(23), Florida(4), Illinois(15), Indiana(21), Kansas(3), Kentucky(14), Missouri(2), Mississippi(1), Nebraska(11), Ohio(44), Oklahoma(6), Pennsylvania(1), Texas(15), Wyoming(5).
The company has also provided a helpline number for users to know more about the breach, and for more details, customers can visit here.
“RMH is pleased to report that the incident has been contained and guests may use their cards with confidence at the RMH Applebee’s locations that were affected by this incident.”