Millions of Sonic Customers May Have Had Credit Card Info Stolen

Another day, another big data breach: Drive-in chain Sonic, home to extra-long cheese coneys and Ocean Water, confirmed today that it’s been the victim of a customer data breach affecting an unknown number of stores, the Wall Street Journal reports.

News of the Sonic breach was first reported by cybersecurity blog Krebs on Security, which claims “The ongoing breach may have led to a fire sale on millions of stolen credit and debit card accounts that are now being peddled in shadowy underground cybercrime stores.”

“We immediately engaged third-party forensic experts and law enforcement when we heard from our [credit card] processor,” the chain said in a statement. “While law enforcement limits the information we can share, we will communicate additional information as we are able.”

Sonic has more than 3,500 locations located across 45 U.S. states. Other chains recently targeted by hackers in large-scale credit card data breaches include Wendy’s, Chipotle, and Arby’s, the latter of which is now facing numerous lawsuits over the incident.

• Breach at Sonic May Have Impacted Millions of Debit, Credit Cards [Krebs on Security]
• Fast-Food Chain Sonic Confirms Data Breach [WSJ]
• Massive Chipotle Data Breach Affected Roughly 2,250 Restaurants [E]
• Arby’s Sued Following Massive Credit Card Data Breach [E]