BlueWave Express Car Wash

Acme Car Wash and Clearwater Express notified the California AG of a data security incident involving its point-of-sale systems. Between February 6 and 23, 2017, malware installed by a third-party platform provider compromised customer payment card data (names, card numbers, security codes). The company worked with the provider to remove malware, implemented monitoring, and offered one year of credit monitoring via Kroll to affected customers.