ATLANTA Georgia-based Arby s restaurant chain failed to prevent hackers from stealing customer information at hundreds of its stores, a Connecticut couple said in a new federal lawsuit. Since early February, eight credit unions and banks from Indiana, Alabama, Arkansas, Louisiana, Michigan, Pennsylvania and Montana have filed seven other federal lawsuits. All make similar allegations about what the credit unions describe as a massive data breach. Arby s said in a statement Monday that it s not commenting on the pending litigation, but we believe the claims are without merit and intend to vigorously defend against them.
From late October through Jan. 19, hundreds of thousands, if not millions, of credit and debit cards issued by financial institutions, including Plaintiff, were compromised due to Arby s severely inadequate security practices, North Alabama Educators Credit Union states in its lawsuit filed last month.
Arby s actions and omissions left highly sensitive Payment Card Data of the Plaintiff s customers exposed and accessible for hackers to steal for nearly three months, the Alabama credit union maintains. In the latest lawsuit, Jacqueline and Joseph Weiss of Glastonbury, Conn., say computer hackers used data-looting malware to penetrate systems at about 1,000 Arby s restaurants during the breach. In December 2016, the couple discovered thousands of dollars in unauthorized charges on the Visa card they d used at an Arby s in Connecticut, they say in their lawsuit filed last week.
The Weiesses lawsuit asserts that a credit union organization alerted its members that at least 355,000 credit and debit cards were compromised by the Arby s breach. By installing malware at the Point Of Sale or cash register, hackers were able to steal payment card data from remote locations as a card was swiped for payment, Indiana-based Midwest America Federal Credit Union claimed in a February lawsuit. Arby s knew the danger of not safeguarding its POS network as various high profile data breaches have occurred in the same way, including data breaches of Target, Home Depot and, most recently, Wendy s, the Indiana credit union maintains in its lawsuit.
Lawyers for the Weisse s say the threat isn t over.
There is a strong probability that entire batches of stolen information have yet to be dumped on the black market, they state, meaning Arby s customers could be at risk of fraud and identity theft for years into the future.
It s not clear whether a criminal investigation has been opened in the Arby s breach. The FBI s policy is not to confirm or deny whether a matter is being investigated, FBI Special Agent Stephen Emmett said Monday.
ROBINSON TOWNSHIP, PA
A woman experienced a dressing room nightmare. Advertisement
On March 25 around 7 p.m., Heather Lipinski says she was trying on bathing suits in the fitting room at Macy’s at the Mall at Robinson.
“I did not even have the top put on fully, and I noticed this phone,” said Lipinski.
Lipinski says the phone stuck out of a pocket on the floor, so she reached down for it.
“I grabbed it, and he came underneath and grabbed it out of my hand,” said Lipinski. Startled, she peered out the door and told a nearby associate.
Lipinski added, “My biggest fear is he has me naked on his phone.”
Mall security showed her surveillance video. Lipinski says it shows a man rushing out of the dressing rooms and out of the mall to his car in the parking lot.
“The mall security guard came in and saw the guy and was like, oh that’s our guy,” said Lipinski.
Robinson Township police released a still image from that surveillance video hoping someone can identify him.
Lipinski shared her experience on Facebook to warn other women. Since Saturday, it has been shared more than 2,000 times. Another young woman reached out to Lipinski on Facebook to let her know the same thing happened to her. Hannah Chauvet described an experience similar to Lipinski’s – a cellphone peeking out of a pocket. The only difference is that she says it happened in a fitting room in the Forever 21 at the Mall at Robinson on Feb. 8, 2016. Chauvet just turned 18 but says she was only 16 at the time. Lipinski wants it to stop.
“I am not OK,” said Lipinski. “No, I am not going to let it go. I am not going to let it go until they find him.”
The Mall at Robinson released this statement: “The safety of our customers and associates is our top priority. As a company we do not comment or provide any additional information on ongoing investigations. Please contact the local Robinson Township Police Department with any questions.”
Macy’s released this statement: “TheMall at Robinson s top priority is to ensure a pleasant and safe shoppingexperience for all of our guests. We are cooperating with RobinsonTownship Police Department regarding an incident inside Macy s Department Storeon March 25.”
WEBVTT ED CLOTHING ON IN THEMALL.SHANNON: HERE IS PITTSBURGH’SACTION NEWS 4 ALYSSA RAYMOND.ALYSSA: A WOMAN SHARED HEREXPERIENCE ON FACEBOOK TO WARNOTHER WOMEN.IT HAS SINCE BEEN SHARED MORETHAN 2000 TIMES, AND NOW WE ARELEARNING SHE IS NOT THE ONLY ONETHAT EXPERIENCED THIS EXACT SAMETHING AT THE SMALL.HEATHER: MY BIGGEST FEAR IS HEHAS ME NAKED ON HIS PHONE.ALYSSA: ON SATURDAY, HEATHERLIPINSKI WALKED INTO A FITTINGROOM IN MACY’S AT THE MALL ATROBINSON AND STARTED TRYING ONBATHING SUITS.HEATHER: I DIDN’T EVEN HAVE THETOP PUT ON FULLY, AND I NOTICEDTHIS PHONE.LIPINSKI SAYS THE PHONE STUCKOUT OF A POCKET, SO SHE REACHEDDOWN FOR IT.HEATHER: I GRABBED IT, AND HECAME UNDERNEATH AND GRABBED ITOUT OF MY HAND.ALYSSA: STARTLED, SHE PEERED OUTTHE DOOR AND TOLD A NEARBYASSOCIATE.MALL SECURITY SHOWED HERSURVEILLANCE VIDEOLIPINSKI SAYS IT SHOWED A MANRUSHING OUT OF THE DRESSINGROOMS AND OUT OF THE MALL TO HISCAR IN THE PARKING LOT.ROBINSON TOWNSHIP POLICERELEASED THIS STILL IMAGE,HOPING SOMEONE RECOGNIZES HIM.HEATHER: THE MALL SECURITY GUARDCAME IN AND SAW THE GUY AND WASLIKE, “OH THAT’S OUR GUY.”ALYSSA: ANOTHER WOMAN REACHEDOUT TO LIPINSKI TO LET HER KNOWTHE SAME THING HAPPENED TO HER.SHE SHARED THIS PICTURE WITH USTAKEN ON FEBRUARY 8, 2016 FROM ADRESSING ROOM IN FOREVER 21 INTHE MALL AT ROBINSON.SAME DEAL — A CELL PHONEPEEKING OUT OF A POCKET.SHE SAYS SHE WAS 16 AT THE TIME.LIPINSKI WANTS IT TO STOP.HEATHER: I’M NOT OKTHEY’RE GOING TO CONTINUE –“LET US GO.”NO, I’M NOT GOING TO LET IT GO.I’M NOT GOING TO LET IT GO UNTILTHEY FIND HIM.ALYSSA: THE MALL RELEASED ASTATEMENT TO US, SAYING SAFETY
Doug Lind, Fillmore County Fair Board, discussed plans to hold a music concert at the fairgrounds on Saturday, August 12. Councilman David Collett was absent at this March 20 meeting. City Administrator Joe Hoffman reported that he met with Lind, Mayor Kurt Reicks, and Police Chief Matt Schultz last week to discuss the planned concert and the city s ordinance that regulates large exhibitions. One question under discussion was whether or not the Ag Society will need to get a license to put on the concert. They have also met with Sheriff Tom Kaase. Lind said they are in the process of acquiring a contract for the concert which they hope could attract several thousand people from southeast Minnesota. The maximum capacity is 4,000. They plan to offer an opportunity to camp and expect 200-300 campers (750 maximum). According to the city s ordinance, if there are more than 1,000 people for over an eight-hour period, a license is required. The Ag Society has applied for a license. They will also apply for a liquor license. They are working to identify possible additional areas for parking.
The great unknown is just how many people will attend. General admission will be $20. Arrangements will be made for security. The concert area will be fenced, there will be permanent and portable toilets, vendors (providing drinking water), and additional portable lighting. A requirement for a physician or nurse for every 5,000 people was discussed. Lind suggested EMTs and an ambulance could be on hand. The ordinance requires one security guard for 100 people up to 1,000. The ordinance also asks for a $50,000 bond. Lind said the Ag Society does have a bond, but much less than $50,000. City Attorney Dwight Luhmann noted the Fair Board does large events during the fair and knows how to handle the necessary issues. Lind suggested their current general liability insurance would be available for liability issues. He added they are prepared to follow the rules. Hoffman said there would not be a requirement for a license if this event were held during the fair.
Councilwoman Holly Zuck made a motion to ask the Fair Board to obtain a license. She suggested ordinance conditions five (physician and nurse), 10 (one security guard per 100 people), and 14 ($50,000 bond) be waived. A motion was approved to ask for a license and to waive the $50,000 bond; leaving five and 10 up to the city s staff discretion, depending on the number of ticket sales.
Other business in brief
Jim Bakken, Public Works, showed a picture of the city s 2009 Chevy plow pick-up that has a broken frame. He said even if it is repairable it won t serve as a plow pick-up. Approval was given to purchase a 2017 Chevrolet 3500 off the state bid for $33,500. The cost will be split 50/50 with Preston Public Utilities. The plow will be mounted on the new pick-up.
Hoffman said they don t know if the break is due to corrosion or an incident. A claim has been submitted to insurance. Bakken suggested if the 2009 pick-up can be made safe and meet DOT regulations, it can be repaired and used for light duty. Councilman Robert Maust voted against the motion as he believes the 2009 pick-up should be scrapped for liability reasons.
Approval was given to purchase a skid loader with attachments and a new mower with deck to replace a 2011 John Deere lawn mower. Bakken explained how this is the best use of funds over a period of years. The city does not have a skid loader currently. The total cost to the city will be about $19,800. The nearly $60,000 cost of the two pieces of equipment after trade is shared equally by the city, Park Board, and Utility Commission.
A variance request from Nancy Smock to build a 25-foot by 25-foot free standing open air carport off the alley behind her home was approved as recommended by Planning and Zoning. The variance is from the city code that limits 35% of a lot to be covered by structures. When this carport is constructed 41% of the Smock lot will be covered by structures. During the public hearing at P and Z there was no comment from the public.
A three year contract with J & M Displays was approved. The longer term contract comes with a 15% bonus (12 shells worth $674 per year). Heath Mensink explained that the longer contract allows them to have more fireworks for Trout Days. The contract doesn t require they purchase fireworks each year of the contract, but does require that if fireworks are purchased they must purchase them from J & M.
The council approved colors for the exterior of city hall. The wall (EFIS) will be yellow-tan, the canopy sierra tan, and the trim surrey beige.
The mayor proclaimed Friday, April 28 as Arbor Day. Some elementary kids will help plant a tree on that day in the city.