THE WENDY'S COMPANY
bd_d08b42b228651f10 · schema v1 · pii pii-v1
Full breach record for THE WENDY'S COMPANY →5 incidents on fileWendy's of Fresno, Inc. reported a data breach affecting payment card information at some franchisee-operated restaurants in the U.S. The incident occurred between December 2, 2015, and June 8, 2016, with unusual activity first reported in February 2016. Malware was deployed on point-of-sale systems after a service provider's remote access credentials were compromised. Affected data included cardholder name, card number, expiration date, CVV, and service code. Wendy's disabled the malware and offered one year of fraud consultation and identity restoration services.
J jump to incidentP pin to compareR raw source
Incident timeline
Dec 2, 2015
Begins
Feb 1, 2016
Discovered
Jul 7, 2016
Filed
vs. sector median
+15 wks slower
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- South Carolina State AGbd_0cb8339e139fc8ed2016-07-07Verified
- Montana State AGbd_763a56d30d1b3fbf2016-07-07Verified
- New Hampshire State AGbd_ed7785031971f8aa2016-07-05 · +2dVerified
Filing propagation · 4 filings · 4 states
View merged incident ↗Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.