Cards Used at 137 Restaurants Exposed by Point-of-Sale Provider Breach

North Country Business Products point-of-sale and security solutions provider with roughly 6500 customers around the Midwest has disclosed a data breach which led to the exposure of payment information for clients who used their credit and debit cards at 137 restaurants.

According to the company's data breach notification, North Country first observed that suspicious activity was present on some of its clients' networks on January 4 and a joint investigation with a third-party cybersecurity forensic firm established that the cause was malware deployed on its partner restaurants' networks.

As detailed in the notification breach hosted at ncbpdataevent.com:

On January 30, 2019, the investigation determined that an unauthorized party was able to deploy malware to certain of North Country’s business partners restaurants between January 3, 2019, and January 24, 2019, that collected credit and debit card information.

North Country also said that the bad actors who deployed the malware were potentially able to gain access to "the cardholder’s name, credit card number, expiration date, and CVV."

The North Country’s business partners whose customers were likely affected by this data breach are listed within the data breach notification, and it comprises 137 different restaurants from roughly a dozen U.S. states.

The company has also set up a dedicated assistance line for individuals who want to learn more about the security incident, with the line available at 1-877-204-9537 being open from "Monday through Friday (excluding U.S. holidays), 9:00 a.m. to 9:00 p.m. EST."

Additionally, the breach notification states that:

North Country takes this incident and the security of our customers’ information very seriously. The company has updated processes to further strengthen its systems to protect its business partners’ customer debit or credit card information and will continue to work with third-party experts to help ensure the highest levels of security.

North Country also provides fraud and identity theft protection information for individuals affected by the breach,  asking them to "review your account statements, and to monitor your credit reports for suspicious activity. If you see any suspicious activity, please report it to the bank that issued your credit card."

Related Articles:

GHC-SCW: Ransomware gang stole health data of 533,000 people

UK bakery Greggs is latest victim of recent POS system outages

McDonald's IT systems outage impacts restaurants worldwide

Frontier Communications shuts down systems after cyberattack

Cisco Duo warns third-party data breach exposed SMS MFA logs