December 4, 2022

McDonald’s Hit by Data Breach

McDonald’s Corp.

MCD 0.56%

said hackers stole some data from its systems in markets including the U.S., South Korea and Taiwan, in another example of cybercriminals infiltrating high-profile global companies.

The burger chain said Friday that it recently hired external consultants to investigate unauthorized activity on an internal security system, prompted by a specific incident in which the unauthorized access cut off a week after it was identified, McDonald’s said. The investigators discovered that company data had been breached in markets including the U.S., South Korea and Taiwan, the company said.

In a message to U.S. employees, McDonald’s said the breach disclosed some business contact information for U.S. employees and franchisees, along with some information about restaurants such as seating capacity and the square footage of play areas. The company said no customer data was breached in the U.S., and that the employee data exposed wasn’t sensitive or personal. The company advised employees and franchisees to watch for phishing emails and to use discretion when asked for information.

McDonald’s said attackers stole customer emails, phone numbers and addresses for delivery customers in South Korea and Taiwan. In Taiwan, hackers also stole employee information including names and contact information, McDonald’s said. The company said the number of files exposed was small without disclosing the number of people affected. The breach didn’t include customer payment information, McDonald’s said.

McDonald’s said that its divisions in South Korea and Taiwan notified regulators in Asia of the breach Friday, and that they would contact customers and employees. The company said its divisions would also notify some employees in South Africa and Russia of possible unauthorized access to their information. The investigation had flagged those countries as well.

McDonald’s said that business at its restaurants wasn’t disrupted by the breach and that it didn’t involve a ransomware attack, in which hackers demand payment to return control of data and operations to companies. McDonald’s said it wasn’t asked for ransom, nor did it make any payment to the hackers.

Prominent ransomware attacks in recent months have disrupted operations at institutions and companies deeply embedded in U.S. civic and commercial life, including hospitals, transport systems, pipelines and meat companies. Some companies including Colonial Pipeline Co. and the U.S. operations of meat company

JBS SA

have said they paid hackers to regain full control of their data and operations.

McDonald’s said that it has increased investment in cybersecurity defenses in recent years, and that those tools helped it respond to the recent attack. The company said it cut off hackers’ access to data soon after the breach was identified.

“McDonald’s will leverage the findings from the investigation as well as input from security resources to identify ways to further enhance our existing security measures,” the company said.

A cyberattack on the U.S.’s largest fuel pipeline on May 7 forced a shutdown that triggered a spike in gas prices and shortages in parts of the Southeast. WSJ explains just how vulnerable the nation’s critical energy infrastructure is to attack. Photo illustration: Liz Ornitz/WSJ

Cyberattacks and Business

Write to Heather Haddon at [email protected]

Copyright ©2020 Dow Jones & Company, Inc. All Rights Reserved. 87990cbe856818d5eddac44c7b1cdeb8

in Tech
Related Posts

Microsoft’s Combination of CEO and Chairman Roles Goes Against Trend

June 17, 2021

June 17, 2021

Microsoft Corp.’s move to combine the roles of its chief executive and chairman goes against recent governance trends. The Redmond,...

Major Parts of Digital Studio Behind ‘Lord of the Rings’ Films to Be Bought by Unity Software for Over $1.6 Billion

November 9, 2021

November 9, 2021

Videogame company Unity Software Inc . agreed to pay $1.63 billion for major parts of the visual-effects studio co-founded by...

How to Make Workplace Technology Accessible to Everyone

June 11, 2021

June 11, 2021

Many companies struggle when it comes to providing inclusive technology in the workplace. People with disabilities routinely face challenges in...

Russia Puts the Squeeze on Social Media to Police Its Critics

June 8, 2021

June 8, 2021

MOSCOW—Russia’s government was quick to use social media when it tried to steer the course of U.S. elections, American officials...

Apple’s Big Show May Not Be Enough

June 4, 2021

June 4, 2021

As Apple Inc. AAPL 1.10% looks to rally its base, the fate of the company’s lucrative ecosystem has never been...

Warehouse Operators Turn to Wearable Technology to Solve Workplace Strains

June 29, 2021

June 29, 2021

Your next load of groceries may be moved by a modern-day bionic man or woman. The U.S. supply-chain arm of...

Amazon Would Add James Bond, Content Depth in Expected MGM Deal

May 25, 2021

May 25, 2021

Amazon.com Inc.’s desire to acquire the fabled MGM movie and television studio in a deal valued at $9 billion with...

After Apple Subpoenas, Justice Department Rethinks Policies on Getting Lawmakers’ Records

June 14, 2021

June 14, 2021

WASHINGTON—The Justice Department will bolster its procedures for obtaining records from members of Congress, Attorney General Merrick Garland said Monday,...

Quanergy to Go Public Through SPAC Deal

June 22, 2021

June 22, 2021

Quanergy Systems Inc., a provider of lidar sensors and 3-D perception software, is going public through a combination with a...

Elliott Management Holds Big Dropbox Stake

June 2, 2021

June 2, 2021

Elliott Management Corp. has taken a sizable stake in software company Dropbox Inc., DBX 1.15% the latest target for the...

Companies Struggle to Keep Their Tech Workers From Logging Off

June 18, 2021

June 18, 2021

Many information-technology workers in the U.S. are on the hunt for new jobs, seeking a wider array of remote work...

Rivian Automotive Targets IPO Valuation Just Above $60 Billion

November 1, 2021

November 1, 2021

Rivian Automotive Inc. is seeking a valuation in a range just above $60 billion in its initial public offering next...

El Salvador Becomes First Country to Approve Bitcoin as Legal Tender

June 9, 2021

June 9, 2021

El Salvador passed a new law on Wednesday that would make the small Central American country the world’s first to...

Why Apple’s Privacy Changes Hurt Snap and Facebook but Benefited Google

October 27, 2021

October 27, 2021

Apple Inc.’s recent privacy crackdown has affected the largest players in online advertising very differently, recent quarterly results show, underscoring...

Real-Estate Agents Look to AI for Sales Boost

June 22, 2021

June 22, 2021

Information-technology executives at some real-estate firms are rolling out artificial-intelligence-based tools designed in part to help agents close deals faster,...