Another restaurant chain has suffered a breach of its payment system.
This time it’s Shoney’s, a sit-down restaurant that serves “All American Food” in 17 states, mostly in the southern part of the country.
Brian Krebs of KrebsOnSecurity.com broke the news on April 14 after he was contacted by multiple sources in the financial industry who had “traced a pattern of fraud on customer cards” to Shoney’s, which is based in Nashville, Tenn. and includes somewhere in the ballpark of 150 company-owned and franchised locations.
According to the Krebs story, “Sources in the financial industry say they’ve received confidential alerts from the credit card associations about suspected breaches at dozens of those locations, although it remains unclear whether the problem is limited to those locations or if it extends company-wide. Those same sources say the affected locations were thought to have been breached between December 2016 and early March 2017.”
Best American Hospitality Corp. released a statement confirming that more than three dozen locations it currently manages were affected by malware installed remotely on its point of sale equipment that processes payment cards.
Seventeen of the locations are based in Tennessee.
The company hired Kroll Cyber Security after “after receiving a report that some payment card numbers that were used at restaurant locations it manages and operates (some of Shoney’s corporate affiliated restaurants) had been stolen,” according to the statement.
“Based on the investigation, Kroll determined that some of the restaurants were subject to initial data breach from December 27, 2016 (the date of first breach varies by location), until the malware was contained on March 6, 2017,” according to the statement released by Best American Hospitality Corp. “In some instances, the malware appears to have identified data from the card’s magnetic stripe that included the cardholder name and number and in other instances the card data identified by the malware did not appear to include the cardholder name. It is possible that not every cardholder name was identified.”
The List
Here is a list of the 37 affected restaurants, and the earliest date the breach began:
Earliest Date/ Address/ City/ State/ ZIP
2016-12-27 1307 North Main Street Summerville SC 29483
2016-12-27 407 Thompson Lane Nashville TN 37211
2016-12-27 791 North Second Street Clarksville TN 37040
2017-01-11 2225 Carmack Blvd Columbia TN 38401
2017-01-11 880 South Jefferson Ave. Cookeville TN 38501
2016-12-27 420 Westbank Expressway Gretna LA 70053
2016-12-27 110 Interstate Drive Nashville TN 37206
2016-12-27 365 White Bridge Pike Nashville TN 37209
2016-12-27 1306 Hwy 96 East Franklin TN 37064
2016-12-27 2003 Memorial Blvd Springfield TN 37172
2016-12-27 546 Donelson Pike Nashville TN 37214
2017-01-11 1950 S. Church Street Murfreesboro TN 37130
2017-01-11 1302 West Walnut Avenue Dalton GA 30720
2017-01-11 2227 Woodward Avenue Muscle Shoals AL 35661
2016-12-27 6121 Highway 49 Hattiesburg MS 39401
2017-01-11 3313 Pemberton Square Blvd Vicksburg MS 39180
2016-12-27 312 S. 16th Avenue Laurel MS 39440
2016-12-27 2645 McGavock Pike Nashville TN 37214
2017-01-11 2124 North Locust Avenue Lawrenceburg TN 38464
2016-12-27 307 Long Hollow Pike Goodlettsville TN 37072
2016-12-27 3083 Wilma Rudolph Blvd. Clarksville TN 37040
2016-12-27 105 Kimball Crossing Dr Kimball TN 37347
2016-12-27 2673 Lee Highway Troutville VA 24175
2016-12-27 26 Sergeant Prentiss Drive Natchez MS 39120
2017-01-11 500 Springridge Road. Clinton MS 39056
2016-12-27 415 W Interstate Drive Jennings LA 70546
2016-12-27 1950 West Hwy 76 Branson MO 65616
2016-12-31 101 Bluefish Dr Suite 105 Panama City Beach FL 32413
2016-12-30 1805 North Kings Highway Myrtle Beach SC 29577
2016-12-28 1206 South Kings Highway Myrtle Beach SC 29577
2016-12-27 2318 Shallowford Village Dr Chattanooga TN 37421
2017-01-11 222 W. Service Rd West Memphis AR 72301
2017-01-11 5829 Highway 70 (Summer Ave) Memphis TN 38134
2017-01-11 3081 Covington Pike Memphis TN 38128
2017-01-09 2771 Highway 82 East Greenville MS 38703
2017-01-11 1526 Sunset Drive Grenada MS 38901
2017-01-11 12204 S. Apopka Vineland Rd Orlando FL 32836
Are you covered for identity theft?
Get Covered
Image: Pexels