Sonic
bd_76d716030d374048 · schema v1 · pii pii-v1
Full breach record for Sonic →Sonic Drive-In notified customers that credit and debit card numbers were acquired without authorization via a malware attack at certain locations. The company engaged law enforcement and third-party forensic firms. Affected customers were offered 24 months of free fraud detection and identity theft protection through Experian.
J jump to incidentP pin to compareR raw source
Incident timeline — partial
? — ?
Breach window unknown
Oct 5, 2017
Filed
No interval is drawn: no breach start or discovery date is on record for this filing.
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- California State AGbd_00c1d99f512e0e782017-10-05Candidate
- New Hampshire State AGbd_c47e6af2d0e49b3d2017-10-05Verified
- Washington State AGbd_3204f342cdf07fdf2017-10-04 · +1dVerified
Filing propagation · 4 filings · 4 states
View merged incident ↗Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.