McDonald’s is the latest company to have private data stolen by a third party, Report informs referring to The Verge.
Unlike other recent attacks on CNA Financial and the Colonial Pipeline, McDonald’s claims it isn’t dealing with ransomware, but store information in the US was taken, along with some customer information in South Korea and Taiwan, the Wall Street Journal reports.
In the US, the data accessed included business contact information for franchises, the seating capacity of stores, and the square footage of play areas. The South Korean and Taiwanese arms of McDonald’s “had customer personal data accessed,” and the company “will be taking steps to notify regulators and customers listed in these files.” McDonald’s stressed that “no customer payment information was contained in these files.”
McDonald’s says business operations were not interrupted by the data breach, and “in the coming days, a few additional markets will take steps to address files that contained employee personal data.” The Wall Street Journal writes these other markets include South Africa and Russia, which were both flagged in the security consultants’ initial investigation.