May 25, 2022

McDonald’s Hit by Data Breach

McDonald’s Corp.

MCD 0.56%

said hackers stole some data from its systems in markets including the U.S., South Korea and Taiwan, in another example of cybercriminals infiltrating high-profile global companies.

The burger chain said Friday that it recently hired external consultants to investigate unauthorized activity on an internal security system, prompted by a specific incident in which the unauthorized access cut off a week after it was identified, McDonald’s said. The investigators discovered that company data had been breached in markets including the U.S., South Korea and Taiwan, the company said.

In a message to U.S. employees, McDonald’s said the breach disclosed some business contact information for U.S. employees and franchisees, along with some information about restaurants such as seating capacity and the square footage of play areas. The company said no customer data was breached in the U.S., and that the employee data exposed wasn’t sensitive or personal. The company advised employees and franchisees to watch for phishing emails and to use discretion when asked for information.

McDonald’s said attackers stole customer emails, phone numbers and addresses for delivery customers in South Korea and Taiwan. In Taiwan, hackers also stole employee information including names and contact information, McDonald’s said. The company said the number of files exposed was small without disclosing the number of people affected. The breach didn’t include customer payment information, McDonald’s said.

McDonald’s said that its divisions in South Korea and Taiwan notified regulators in Asia of the breach Friday, and that they would contact customers and employees. The company said its divisions would also notify some employees in South Africa and Russia of possible unauthorized access to their information. The investigation had flagged those countries as well.

McDonald’s said that business at its restaurants wasn’t disrupted by the breach and that it didn’t involve a ransomware attack, in which hackers demand payment to return control of data and operations to companies. McDonald’s said it wasn’t asked for ransom, nor did it make any payment to the hackers.

Prominent ransomware attacks in recent months have disrupted operations at institutions and companies deeply embedded in U.S. civic and commercial life, including hospitals, transport systems, pipelines and meat companies. Some companies including Colonial Pipeline Co. and the U.S. operations of meat company

JBS SA

have said they paid hackers to regain full control of their data and operations.

McDonald’s said that it has increased investment in cybersecurity defenses in recent years, and that those tools helped it respond to the recent attack. The company said it cut off hackers’ access to data soon after the breach was identified.

“McDonald’s will leverage the findings from the investigation as well as input from security resources to identify ways to further enhance our existing security measures,” the company said.

A cyberattack on the U.S.’s largest fuel pipeline on May 7 forced a shutdown that triggered a spike in gas prices and shortages in parts of the Southeast. WSJ explains just how vulnerable the nation’s critical energy infrastructure is to attack. Photo illustration: Liz Ornitz/WSJ

Cyberattacks and Business

Write to Heather Haddon at [email protected]

Copyright ©2020 Dow Jones & Company, Inc. All Rights Reserved. 87990cbe856818d5eddac44c7b1cdeb8

in Tech
Related Posts

Amazon’s Prime Day Is Earlier Than Usual This Year. Here’s When It Is and What to Expect.

June 21, 2021

June 21, 2021

This year’s Prime Day, running on Monday and Tuesday and a month earlier than it typically does, creates a likely...

Ford to Idle or Curb Output at More Plants Because of Chip Shortage

June 30, 2021

June 30, 2021

Ford Motor Co. said the computer-chip shortage will force it to cut output across more than a half-dozen U.S. factories...

Stop With the Video Chats Already. Just Make a Voice Call.

May 26, 2021

May 26, 2021

I’d love to do a call about this. And by “call” I mean absolutely NOT a video call. Let’s do...

Hackers Linked to SolarWinds Return With Phishing Attack, Microsoft Says

May 28, 2021

May 28, 2021

The Russia-linked hackers behind the cyberattack on SolarWinds SWI -0.72% have returned, launching a phishing attack targeting approximately 3,000 email...

Driver-Assistance Crashes Attract Closer U.S. Scrutiny

June 29, 2021

June 29, 2021

Federal regulators are tightening their oversight of car crashes that involve advanced driver-assistance or automated-driving features, a shift that follows...

Embattled Chinese Property Tycoon Turns to Electric Cars. Cue $87 Billion Valuation.

May 19, 2021

May 19, 2021

SHANGHAI—Guests at a private August dinner hosted by billionaire entrepreneur Jack Ma were intrigued by a fellow diner who introduced...

The Apple-Microsoft Tech War Reignites for a New Era

June 27, 2021

June 27, 2021

A new clash of tech titans is taking shape as Apple Inc. AAPL -0.22% and Microsoft Corp. MSFT -0.63% reignite...

Tencent Earnings Power Through Tech Crackdown

May 20, 2021

May 20, 2021

Regulatory concerns have clouded the outlook for the world’s largest gaming company lately. But the latest results for Tencent show...

TikTokers Filmed Inside a $5.299 Million California Listing. It Found a Buyer in Two Weeks.

July 1, 2021

July 1, 2021

The first time real-estate agent Rochelle Atlas Maize saw Julie Stevens’s home in Santa Monica, Calif., she knew it would...

Glitch Unmasks Role of Networks Making Websites Faster

June 9, 2021

June 9, 2021

The use of remote networks to make websites run faster can also leave the sites vulnerable to outages, such as...

Amazon Faces Possible $425 Million EU Privacy Fine

June 10, 2021

June 10, 2021

A European Union privacy regulator has proposed a fine of more than $425 million against Amazon.com Inc., AMZN 1.39% part...

EV Startups Are in Trouble. Investors Don’t Care.

June 19, 2021

June 19, 2021

Lordstown Motors Corp. RIDE 3.30% , an electric-truck startup, is off to a bumpy start as a public company. In...

10 Expert Ways to Get More Instagram Followers: A Summer Experiment

June 2, 2021

June 2, 2021

WHY WOULD ANYONEwant more Instagram followers?” sighed a friend two summers ago. “Mine just plague me with emojis in the...

Vizio Looks to Boost Software Business With IPO Cash

June 23, 2021

June 23, 2021

Vizio Holding Corp. is ramping up investment in its software business amid growing consumer demand for streaming content. Vizio, which...

United Plans to Buy 15 Supersonic Planes

June 3, 2021

June 3, 2021

United Airlines said it hopes to fly passengers on a planned new supersonic jetliner by decade’s end, which would resurrect...