PF Chang's swipes cards manually in U.S. after breach

Fri Jun 13, 2014 4:31pm EDT

Related Topics

(Reuters) - P.F. Chang's China Bistro said it has begun manually swiping payment cards at all U.S. restaurants in the wake of a data breach to ensure that transactions are secure as investigators figure out how attackers accessed its systems.

The operator of Asian-themed restaurants disclosed the rare move to revert to manual equipment, providing customers with carbon copied receipts, after "a security compromise" resulted in the theft of an unknown number payment card numbers from its restaurants. It has so far provided few details about the incident.

P.F. Chang's had said on Tuesday that it was investigating a possible breach, joining a growing list of major U.S. merchants involved in payment card breaches that begin late last year with Target Corp

"We have moved to a manual credit card imprinting system," Chief Executive Rick Federico said in a statement emailed to Reuters early on Friday. "This ensures our guests can still use their credit and debit cards safely in our restaurants as our investigation continues."

Madeline Aufseeser, a senior credit card processing analyst with Aite Group, said the move to use manual swiping machines known as "knuckle busters" would prevent hackers from getting any more payment card numbers but had other tradeoffs.

"It makes a lot of work for the restaurant and they may end up eating a lot of tickets because they won’t get immediate authorization on the spot," she said.

The Arizona-based company, which operates over 200 restaurants, has set up a website with information about the investigation being conducted by the Secret Service and private forensics experts.

(Reporting by Jim Finkle; Editing by Richard Valdmanis, Bernard Orr)

FILED UNDER:
We welcome comments that advance the story through relevant opinion, anecdotes, links and data. If you see a comment that you believe is irrelevant or inappropriate, you can flag it to our editors by using the report abuse links. Views expressed in the comments do not represent those of Reuters. For more information on our comment policy, see http://blogs.reuters.com/fulldisclosure/2010/09/27/toward-a-more-thoughtful-conversation-on-stories/
Comments (1)
cfbcfb wrote:
I still remember the many ways the imprint system was used. Everything from running an extra print to reproduce the card to dumpster diving for the carbons to employees imprinting the card twice and forging the customer signature. So good luck with that ‘bulletproof’ idea. Next time pay your IT guys more than minimum wage and get a real security system.

Jun 15, 2014 10:53am EDT  --  Report as abuse
This discussion is now closed. We welcome comments on our articles for a limited period after their publication.