Point-of-sale malware called “Backoff” used third party vendor credentials to access customer details at Dairy Queen, a major US chain.
395 of the company’s 4500 restaurants were affected by the attack, which harvested details for a period of at least three weeks in August.
Stolen information included customer names, and card information such as card numbers and expiration dates. Dairy Queen has said that no further customer information, such as email addresses or PIN and Social Security numbers were taken.
Backoff first surfaced in October last year and works by collecting payment card data from a computer’s RAM in the short period between the card being swiped and the data being encrypted. The US Department of Homeland Security said in August that POS devices at over 1000 businesses could be affected by Backoff or similar malware.
As the demand for immediate payments implementation grows in the United States, Iliad Solutions have identified one of the largest risks to face the payments industry over the next few years.
Barclays has signed contracts with six of the fintech startups that just graduated from its second New York accelerator programme.
Company card killer Pleo has raised $3m in new funding as it prepares for public launch in the UK and Denmark.
Cheques are become less and less common in the UK according to new research from global market research firm Mintel which claims contactless card use has overtaken cheque payments in the UK for the first time.