Sonic

Sonic Corp. reported a malware attack at certain Sonic Drive-In locations where credit and debit card numbers were acquired without authorization. The company engaged law enforcement and third-party forensic investigators. Affected customers were offered 24 months of free fraud detection and identity theft protection via Experian. The incident is contained.

Sonic Drive-In notified customers that credit and debit card numbers were acquired without authorization via a malware attack at certain locations. The company engaged law enforcement and third-party forensic firms. Affected customers were offered 24 months of free fraud detection and identity theft protection through Experian.

Sonic Corp. notified the NH Attorney General on Oct 5, 2017, of a malware attack at certain Sonic Drive-In locations where credit/debit card numbers may have been acquired without authorization. Discovery was Sept 18, 2017. Sonic engaged forensic investigators and law enforcement. Affected individuals were offered 24 months of credit monitoring.

Sonic Corp. notified Washington AG that credit and debit card numbers were acquired without authorization via malware at certain Sonic Drive-In locations. Discovery date: Sept 18, 2017. Notification sent Oct 4, 2017. Law enforcement and forensic investigators engaged. Free credit monitoring offered.