Data breach at US restaurant and gambling chain Dotty’s may have leaked sensitive customer information

A cyber-attack on US fast food and gambling chain Dotty’s has exposed the personal data of customers, the company has warned.

Dotty’s, a fast food chain which offers gambling services across 175 locations, is owned and operated by Nevada Restaurant Services (NRS).

NRS said that malware was discovered on “certain computer systems” on January 16, 2021, allowing an unauthorized individual to gain access to, and copy, data.

Potential datasets that were accessed include customer names, dates of birth, Social Security numbers, driver’s license or state ID numbers, passport numbers, financial account and/or routing numbers, health insurance information, treatment information, biometric data, medical records, taxpayer identification numbers, and credit card numbers and/or expiration dates.

NRS has not yet released any details on the number of people affected in the breach.

It said it has contacted potential victims via post and has urged NRS customers to be vigilant and look for any signs of fraud.

More information on steps that victims can take to protect themselves can be found in the press release.

The company said in a statement: “NRS has security measures in place to protect its systems and the information in its possession and NRS has worked to add further technical safeguards to its environment.

“Following this incident, NRS took immediate steps to secure its systems and to conduct a diligent investigation into the full nature and scope of the incident.”

The Daily Swig has contacted NRS for more information and will update this article accordingly.

Source: https://portswigger.net/daily-swig/data-breach-at-us-restaurant-and-gambling-chain-dottys-may-have-leaked-sensitive-customer-information