Shoney's

Some Shoney's Stores Face Credit Card Breach

Underline Image
By Danny Klein April 2017 Chain Restaurants

Shoney’s is the latest restaurant chain to face a credit card breach. Best American Hospitality Corp., a group that manages a handful of Shoney’s corporate-owned stores, released a statement detailing an investigation into stolen payment card information at 37 locations spread out throughout South Carolina, Tennessee, Louisiana, Georgia, Alabama, Mississippi, Virginia, Missouri, Florida, and Arkansas.

The company’s investigation found that malware was installed remotely on point of sale equipment that processes payment cards used at some of the restaurants. The malware searched for track data (cardholder name, card number, expiration date, and internal verification code) read from the magnetic stripe of a payment card as it was being routed through the affected computer, the statement explains.

Best American Hospitality Corp. hired Kroll Cyber Security to conduct the investigation. The company found that some of the units were subject to an initial data breach from December 27, 2016 until the malware was contained on March 6, 2017. The date of the first breach varies by location, the statement adds.

“In some instances, the malware appears to have identified data from the card’s magnetic stripe that included the cardholder name and number and in other instances the card data identified by the malware did not appear to include the cardholder name. It is possible that not every cardholder name was identified,” the statement reads.

The 70-year-old Shoney's has around 150 company-owned and franchised locations in 17 states.

The breach was first reported by Krebs on Security. Hundreds of franchised Wendy’s restaurants were breached last year and Arby’s just released an update on a similar security incident Friday, saying that company-owned stores affected began no earlier than October 20, 2016 and ended no later than January 12, 2017. Read more about that incident here.

Here are the Shoney’s locations affected with the earliest date of breach posted:

2016-12-27 1307 North Main Street, Summerville, SC, 29483

2016-12-27 407 Thompson Lane, Nashville, TN, 37211

2016-12-27 791 North Second Street, Clarksville, TN 37040

2017-01-11 2225 Carmack Blvd, Columbia, TN, 38401

2017-01-11 880 South Jefferson Ave., Cookeville, TN 38501

2016-12-27 420 Westbank Expressway, Gretna, LA, 70053

2016-12-27 110 Interstate Drive, Nashville, TN, 37206

2016-12-27 365 White Bridge Pike, Nashville, TN, 37209

2016-12-27 1306 Hwy 96 East Franklin, TN, 37064

2016-12-27 2003 Memorial Blvd Springfield, TN, 37172

2016-12-27 546 Donelson Pike Nashville, TN, 37214

2017-01-11 1950 S. Church Street Murfreesboro, TN, 37130

2017-01-11 1302 West Walnut Avenue Dalton, GA, 30720

2017-01-11 2227 Woodward Avenue Muscle Shoals, AL, 35661

2016-12-27 6121 Highway 49 Hattiesburg, MS, 39401

2017-01-11 3313 Pemberton Square Blvd, Vicksburg, MS 39180

2016-12-27 312 S. 16th Avenue, Laurel, MS, 39440

2016-12-27 2645 McGavock Pike, Nashville, TN, 37214

2017-01-11 2124 North Locust Avenue, Lawrenceburg, TN, 38464

2016-12-27 307 Long Hollow Pike, Goodlettsville, TN, 37072

2016-12-27 3083 Wilma Rudolph Blvd., Clarksville, TN, 37040

2016-12-27 105 Kimball Crossing Dr Kimball, TN, 37347

2016-12-27 2673 Lee Highway Troutville, VA, 24175

2016-12-27 26 Sergeant Prentiss Drive, Natchez, MS, 39120

2017-01-11 500 Springridge Road., Clinton, MS, 39056

2016-12-27 415 W Interstate Drive, Jennings, LA, 70546

2016-12-27 1950 West Hwy 76, Branson, MO, 65616

2016-12-31 101 Bluefish Dr Suite 105, Panama City Beach, FL, 32413

2016-12-30 1805 North Kings Highway, Myrtle Beach, SC, 29577

2016-12-28 1206 South Kings Highway, Myrtle Beach, SC, 29577

2016-12-27 2318 Shallowford Village Dr, Chattanooga, TN, 37421

2017-01-11 222 W. Service Rd West Memphis, AR, 72301

2017-01-11 5829 Highway 70 (Summer Ave), Memphis, TN, 38134

2017-01-11 3081 Covington Pike, Memphis, TN, 38128

2017-01-09 2771 Highway 82, East Greenville, MS, 38703

2017-01-11 1526 Sunset Drive, Grenada, MS, 38901

2017-01-11 12204 S. Apopka Vineland Rd, Orlando, FL, 32836

Best American Hospitality Corp. also released some steps for guests to protect their information:

It is always advisable to remain vigilant to the possibility of fraud by reviewing your payment card statements for any unauthorized activity. You should immediately report any unauthorized charges to your card issuer because payment card rules generally provide that cardholders are not responsible for unauthorized charges reported in a timely manner. The phone number to call is usually on the back of your payment card. You should immediately report any unauthorized charges to your card issuer because payment card rules generally provide that cardholders are not responsible for unauthorized charges reported in a timely manner. The phone number to call is usually on the back of your payment card.