CM Ebar LLC (operating as Elephant Bar restaurants) disclosed a security incident affecting payment card data at locations across seven states. Unauthorized individuals installed malware on payment processing systems between August 12, 2015, and December 4, 2015. The incident compromised names, card numbers, expiration dates, and verification codes. The company engaged forensic experts, disabled the malware, reconfigured POS systems, and notified law enforcement. The incident is now contained.