Malware was found on POS systems at four independently owned and operated Wingstop locations, and it could have enabled attackers to capture customer payment card information.
First Data Management Services Corp. and Citicorp Payment Services Inc. have been ordered to return any funds held in excess of $500,000 to the supermarket chain.
Several thousand customers are being notified that unauthorized persons accessed the ValuePetSupplies.com servers and installed malicious files to capture personal information.
States investigating JPMorgan's massive breach from this past summer are requesting more information on the type of information that was stolen and the steps taken to protect data.